Optical layer multicasting using a multiple sub-carrier header and a multicast switch with active header insertion via single sideband optical processing

ABSTRACT

An optical signaling header technique applicable to optical networks wherein packet routing information is embedded in the same channel or wavelength as the data payload so that both the header and data payload propagate through network elements with the same path and the associated delays. The technique effects survivability and security of the optical networks by encompassing conventional electronic security with an optical security layer by generating replicated versions of the input data payload at the input node, and the transmission of each of the replicated versions over a corresponding one of the plurality of links. Moreover, each of the links is composed of multiple wavelengths to propagate optical signals or optical packets, and each of the replicated versions of the data payload may be propagated over a selected one of the wavelengths in each corresponding one of the plurality of links.

BACKGROUND OF THE DISCLOSURE

[0001] 1. Field of the Invention

[0002] This invention relates generally to optical communication systemsand, more particularly, to a multicasting optical system, characterizedby high throughput and low latency network traffic, which deploys anoptical signaling header propagating with the data payload to conveymulticast, security and survival information, as well as information toconfigure a virtual optical private network.

[0003] 2. Description of the Background

[0004] 2.1 Overview of the Background

[0005] Recent research advances in optical Wavelength DivisionMultiplexing (WDM) technology have fostered the development of networksthat are orders of magnitude higher in transmission bandwidth and lowerin latency than existing commercial networks. While the increase inthroughput and the decrease in latency are impressive, it is alsonecessary to provide multicasting capability combined with secure andsurvivable propagation as well as the capability to configure virtualoptical private networks in order to realize the Next GenerationInternet (NGI) vision of providing the next generation of ultra-highspeed networks that can meet the requirements for supporting newapplications, including national initiatives. Towards this end, currentresearch efforts have focused on developing an ultra-low latencyInternet Protocol (IP) over WDM optical packet switching technology thatpromises to deliver the four-fold goal of high throughput, low latency,secure and survivable networks, and optical virtual private networks.Such efforts, while promising, have yet to fully realize this four-foldgoal.

[0006] The most relevant reference relating to achieving this four-foldgoal is U.S. Pat. No. 6,111,673 issued to Chang and Yoo (hereinafterChang) on Aug. 29, 2000, entitled “High-Throughput, Low-Latency NextGeneration Internet Networks Using Optical-Tag Switching”, and assignedto the same assignee as the present invention. As discussed in Chang,there are a number of challenging requirements in realizing IP/WDMnetworks of the type required for the NGI initiative. First, the NGInetwork must inter-operate with the existing Internet and avoid protocolconflicts. Second, the NGI network must provide not only ultralow-latency, but must take advantage of both packet-switched (that is,bursty) IP traffic and circuit-switched WDM networks. Third, the NGInetwork requires no synchronization between signaling and data payload.Finally, the NGI network must accommodate data traffic of variousprotocols and formats so that it is possible to transmit and receive IPas well as non-IP signals without the need for complicatedsynchronization or format conversion.

[0007] Chang devised a methodology and concomitant network that satisfythe above requirements. As discussed in Chang, the optical packet headeris carried over the same wavelength as the packet payload data. Thisapproach eliminates the issue of header and payload synchronization.Furthermore, with a suitable use of optical delay at each intermediateoptical switch, the approach also eliminates the need to estimate theinitial burst delay by incorporating the optical delay directly at theswitches. This approach is strikingly difference with “just-in-time”signaling in which the delay at each switch along the path needs to beknown ahead of time and must be entered in the calculation for the totaldelay. Lastly, there is little time wasted in requesting a connectiontime and actually achieving a connection. In comparison to a few seconddelays over techniques prior to Chang, the delay is minimal, onlylimited by the actual hardware switching delays at each switch. Thecurrent switching technology realizes delays of only severalmicroseconds, and shorter delays will be possible in the future. Thisshort delay can be compensated for by using an optical fiber delay lineat each network element (or, equivalently, a network node or, in short,a node) utilizing switches.

[0008] Chang utilizes a unique optical signaling header techniqueapplicable to optical networks. Packet routing information is embeddedin the same wavelength as the data payload so that both the header anddata information propagate through the network with the same path andthe associated delays. However, the header routing information hassufficiently different characteristics from the data payload so that thesignaling header can be detected without being affected by the datapayload and that the signaling header can also be stripped off withoutaffecting the data payload. Such a unique signal routing method isoverlaid onto the conventional network elements, in a modular manner, byadding two types of ‘Plug-and-Play’ modules.

[0009] As explicitly disclosed by Chang, a method for propagating a datapayload from an input network element to an output network element in awavelength division multiplexing system composed of a plurality ofnetwork elements, given that the data payload has a given format andprotocol, includes the following steps: (a) generating and storing alocal routing table in each of the network elements, each local routingtable determining a local route through the associated one of thenetwork elements; (b) adding an optical header to the data payload andembedded in the same wavelength as the data payload prior to inputtingthe data payload to the input network element, the header having aformat and protocol and being indicative of the local route through eachof the network elements for the data payload and the header, the formatand protocol of the data payload being independent of the format andprotocol of the header; (c) optically determining the header at each ofthe network elements as the data payload and header propagate throughthe WDM network; (d) selecting the local route for the data payload andthe header through each of the network elements as determined by lookingup the header in the corresponding local routing table; and (e) routingthe data payload and the header through each of the network elements incorrespondence to the selected route.

[0010] As further explicitly disclosed by Chang, the overall system isarranged in combination with (a) an electrical layer; and (b) an opticallayer composed of a wavelength division multiplexing (WDM) networkincluding a plurality of network elements, for propagating a datapayload generated by a source in the electrical layer and destined for adestination in the electrical layer, the data payload having a givenformat and protocol. The system includes: (i) a first type of opticalheader module, coupling the source in the optical layer and the WDMnetwork, for adding an optical header ahead of the data payload andembedded in the same wavelength as the data payload prior to inputtingthe data payload to the WDM network, the header being indicative of alocal route through the network elements for the data payload and theheader, the format and protocol of the data payload being independent ofthose of the header; and (ii) a second type of optical header module,appended to each of the network elements, for storing a local routingtable in a corresponding one of the network elements, each local routingtable determining a routing path through the corresponding one of thenetwork elements, for optically determining the header at thecorresponding one of the network elements as the data payload and headerpropagate over the WDM network, for selecting the local route for thedata payload and the header through the corresponding one of the networkelements as determined by looking up the header in the correspondinglocal routing table, and for routing the data payload and the headerthrough the corresponding one of the network elements in correspondenceto the selected route.

[0011] Chang offers numerous features and benefits including: (1)extremely low latency limited only by hardware delays; (2) highthroughput and bandwidth-on-demand offered by combining multi-wavelengthnetworking and optical label switching; (3) priority based routing whichallows higher throughput for higher priority datagrams or packets; (4)scalable and modular upgrades of the network from the conventional WDMto the inventive optical label-switched WDM; (5) effective routing oflong datagrams, consecutive packets, and even non-consecutive packets;(6) cost-effective utilization of optical components such asmultiplexers and fibers; (7) interoperability in a multi-vendorenvironment; (8) graceful and step-by-step upgrades of network elements;(9) transparent support of data of any format and any protocol; and (10)high quality-of-service communications.

[0012] While Chang has contributed a significant advance to the opticalcommunications art, there are no teachings or suggestions pertaining totechniques for optically multicasting information through the disclosedNGI network. This limitation is inherent because the optical switchdisclosed in Chang is conventional in the general sense that eachoptical signal arriving at an input port of the optical switch isswitched to a single output port. This is evident by referring to FIG. 6of Chang (also shown as FIG. 6 herein, but with the terminology“tag-switch state” (reference numeral 611) replaced by “label-switchstate” which will also be used in the sequel), wherein optical switch601 is shown as being 1:1, that is, each input signal composed of boththe header and the payload (e.g., the optical signal propagating oninput path 6022 and arriving at port 510) is switched to a single outputport (e.g., port 511) to deliver the input optical signal as an outputsignal (e.g., the output signal propagating on path 604).

[0013] Moreover, Chang teaches that a header is added to each packetincoming to the NGI network at an input node, and that this header isparsed to determine the route through each intermediate node of thenetwork. This is evident with reference, initially, to FIG. 9 (alsoshown as FIG. 9 herein) of Chang which depicts circuitry for detectingthe header, shown as appearing on lead 902—the signal on lead 902conveys routing information. An example of routing information containedin the header is bit stream ‘11101011000’ shown by reference numeral 615of FIG. 6. This bit stream is compared to the “label-switch state” entryin table 610 of FIG. 6 to determine the local route through opticalswitch 601 of FIG. 6 (namely, the route from input port 01 to outputport 11). It is clear from a detailed review of Chang that each headercan convey only a single label-switch state, that is, each header isincapable of providing multiple label-switch states as part of theheader information. Moreover, the sole header is never overwritten orswapped, that is, deleted and replaced, nor is there any teachingrelevant to appending a new header to the original header, such newheader being used further downstream to provide routing information.Thus Chang is devoid of teachings that are generally necessary formulticasting, or for responding to dynamic changes occurring within thenetwork, such as an outage of a network node.

[0014] In addition, there are no teachings or suggestions in Chang torender an optical multicast network both secure and survivable. There isa growing need within the NGI to attain fast, secure, and simultaneouscommunications among communities of interest (e.g., a group of nations)or with different security requirements. Thus, Chang has not providedthe techniques nor circuitry necessary to engender a secure opticalmulticast network for high capacity, resilient optical backbonetransport networks where information, in units of per flow, per burst,or per packet, can be distributed securely according to assignedsecurity levels and multicast addresses in the optical domainindependent of data payload and protocols. With such a network, inaccordance with the present invention, there is the opportunity for aquantum leap in cutting edge communications technologies into anenvironment of ever changing coalitions among nations or communities ofinterest armed with different policies, priorities, ethnic interest, andprocedures. The subject matter in accordance with the present inventionsignificantly enhances the capabilities of optical multicast networkswell beyond what is available with current approaches. A secure opticallayer multicast (SOLM) mechanisms fosters a secure resilient opticalmulticast network (SROMN). Accordingly, a coalition, composed of memberswith multiple security levels, can be established quickly, withinseconds or minutes, and can distribute information simultaneously,according to multicast addresses, to each member in the coalition withdifferent security levels in effect, engendering the dynamic set-up of avirtual private network with a hierarchy of security levels.

[0015] 2.2 Background Specific to Header Processing

[0016] As alluded to above, there is an issue of how to effectivelyprovide multiple headers or, equivalently, a header composed of multiplesub-headers conveying multicasting information. Moreover, there is anadditional issue of how to detect and/or re-insert a header which iscombined with a data payload for propagation over the network using thesame optical wavelength.

[0017] The primary focus in the literature has been on a technique forcombining sub-carrier headers together with a baseband data payload.Initially, this was accomplished in the electrical domain wheresub-carriers where combined with the data payload. One version of thistechnique combined a 2.56 Gb/s data payload with a 40 Mb/s header on 3GHz carrier, and another version of this technique combined a 2.488 Gb/sdata payload with a tunable microwave pilot tone (tuned between 2.520and 2.690 GHz) to route SONET packet in a VDM ring network viaacousto-optical tunable. Both techniques used a single laser diode tocarry the data payload and sub-carrier header. A variation of thistechnique has also been studied for use in a local-area DWDM opticalpacket-switched network, and several other all-optical networks.

[0018] Instead of combing a sub-carrier headers with the data payload inthe electrical domain, they have also been combined in the opticaldomain by using two laser diodes at different wavelengths. However,using two wavelengths to transport data payload and header separatelymay not be practical in the following sense: in an all-optical DWDMnetwork, it is preferred that the header, which may contain networkoperations information, travels along the same routes as data payload sothat it can truthfully report the updated status of the data payload. Ifthe header and the data payload were carried by different wavelengths,they could be routed in the network with entirely different paths, andthe header may not report what the data payload has really experienced.Therefore, although it is preferred that the sub-carrier header and thedata payload be carried by the same wavelength, the art is devoid ofsuch teachings and suggestions.

[0019] The sub-carrier pilot-tone concept was later extended to multiplepilot tones, mainly for the purpose of increasing the number of networkaddresses.

[0020] Recently, consideration has been given to ‘header replacement’for the high-throughput operation in a packet-switched network in whichdata paths change due to link outages, output-port contention, andvariable traffic patterns. Moreover, header replacement could be usefulfor maintaining protocol compatibility at gateways between differentnetworks. However, the only method which has been reported is fortime-division-multiplexed header and data payload requires an extremelyhigh accuracy of timing synchronization among network nodes.

[0021] Most recently, Blumenthal et al., in an article entitled “WDMOptical Label Switching with Packet-Rate Wavelength Conversion andSubcarrier Multiplexed Addressing”, OFC 1999, Conference Digest, pages162-164, report experimental results of all-optical IP label switchingfor WDM switched networks. However, the experimental system is anon-burst system and, moreover, no propagation of the resultant signalover actual fiber is discussed. It is anticipated that the propagationdistance will be substantially limited whenever the system is deployedwith optical fiber because of phase dispersion effects in the opticalfiber.

[0022] From this foregoing discussion of the art pertaining to detailsof header generation and detection, it is readily understood that theart is devoid of teachings and suggestions wherein sub-carriermultiplexed packet data payload and multiple sub-carrier headers(including old and new ones) are deployed so that a >2.5 Gbps IP packetcan be routed through a national all-optical multicast WDM network bythe (successive) guidance of these sub-carrier headers, with the totalnumber of sub-carrier headers that can be written is in the range offorty or more. Moreover, there are no teachings or suggestions of how toutilize the multiple sub-carriers to convey multicasting information.

[0023] 2.3 Background Specific to Security and Survivability

[0024] A. Possible “Attack” Methods

[0025] New forms of Optical Layer Survivability and Security (OLSAS) areessential to counter signal misdirection, eavesdropping (signalinterception), and denial of service (including jamming) attacks thatcan be applied to currently deployed and future optical networks. Thesignal misdirection scenario can be thought of as a consequence of anenemy taking control of a network element or a signaling (control)channel. Possible optical eavesdropping (signal interception) methodscan include (i) non-destructive fiber tapping, (ii) client layertapping, and (iii) non-linear mixing. (Destructive fiber tapping is alsoa possibility, but this scheme is readily detectable by monitoring poweron individual channels.) A description of each of these methods is nowsummarized:

[0026] (i) Non-destructive fiber tapping can be the result of: (a) fiberbending resulting in 1-10% of the optical signal (all wavelengths if aWDM system are used) being emitted out of the fiber cladding and beinggathered and amplified by an eavesdropper; (b) fiber-side fusioninvolving stripping the fiber cladding and fusing two fiber corestogether as another way to perform signal interception (note that thisis an extremely difficult technique to implement); (c) acousto-opticdiffraction involving placing acousto-optic devices on the fiber, whichresults in the leakage of 1-10% of the optical signal (all wavelengths)outside the fiber cladding. There are three examples of non-destructivefiber tapping, as follows:

[0027] (ii) Client layer tapping is the result of measuring the non-zeroresiduals of other channels by the switches of themultiplexers/demultiplexers. When the signal goes through the opticalswitches, part of the optical signal that is not dropped at the clientlayer will appear at the client interface. Even though this signal willhave very low power levels, in many instances it can result inrecognizable information.

[0028] (iii) Non-linear mixing involves sending a high-power pump waveto achieve, for example, four-wave-mixing and in turn map all channelsto different wavelengths that are monitored by a malicious user. Thistechnique requires phase matching at dispersion zero wavelength on thefiber.

[0029] Finally, denial of service can be the result of a variety ofattacks. Some of these attacks include using a high-intensity saturatingsource, a UV bleach, or a frequency chirped source to jam the opticalsignal.

[0030] B. Comparison With Other Approaches

[0031] The three approaches that are currently used to performencryption of the electronic data in the optical layer are thefollowing: (i) chaotic optical encryption; (ii) quantum opticalencryption; and (iii) optical spread spectrum encryption. All threeschemes can be used underneath the electronic encryption layer toprotect the information from possible attacks.

[0032] (i) Chaotic Optical Encryption

[0033] The chaotic optical encryption technique uses what is called“chaotic systems” as the optical encryption method. These are singlewavelength chaotic synchronous fiber lasing systems that use amplitudeor frequency modulation to introduce a “chaotic state” in the network.The information transmitted through the network is encoded onto chaos atthe transmitter side and decoded at the receiver side. This isaccomplished by using a synchronized “chaotic state” at the receivingend in order to “de-encrypt” the original optical signal. Communicationmethods using chaotic lasers have been demonstrated, with arepresentative reference being C. Lee, J. Lee, D. Williams, “SecureCommunications Using Chaos”, Globecom 1995. These schemes utilize arelatively small message embedded in the larger chaotic carrier that istransmitted to a receiver system where the message is recovered from thechaos. The chaotic optical source and receiver are nearly identical, sothat the two chaotic behaviors can synchronize. There are a number ofshortcomings for this method, which the technique in accordance with thepresent invention overcomes.

[0034] First, the chaotic behaviors are highly susceptible to changes inthe initial conditions. The probability for the receiving end chaoticlaser to synchronize its chaotic behavior gets much smaller as theinitial conditions wander. For instance, if the two chaotic lasers driftin their relative cavity length due to changes in the ambient, theprobability of synchronization drops very rapidly. Hence, multiplereceiving users must all synchronize the path length of their lasers.The situation becomes more complex for WDM networks deployed in thefield, since cross-modulations in polarization, phase, and amplitudebetween multiple channels are bound to alter the initial conditions seenby the receiving users. In fact, nonlinear optical effects such asself-phase-modulation will even alter the spectrum of the chaoticcarrier. It is difficult to expect such synchronization to be successfulfor every packet in multiwavelength optical networks. Previously it hasbeen shown with optical network elements equipped with clampederbium-doped fiber amplifiers (EDFAs) and Channel Power Equalizers(CPEs), lasing in the closed cycles does affect transportcharacteristics of other wavelength channels, even if it does notsaturate the EDFAs. Chaotic oscillations in a transparent opticalnetwork due to lasing effect in a closed cycle have been observed. Theyare attributed to the operation of multiple channel power equalizerswithin the optical ring. The presence of unstable ring lasers can causepower penalties to other wavelength channels through EDFA gainfluctuation, even though these EDFAs are gain clamped. It has also beenfound that the closed cycle lasing does not saturate the gain clampedEDFAs in the cycle because the lasing power is regulated by the CPEs.This observation and analysis have significant impacts on the design andoperation of network elements in transparent WDM networks.

[0035] Second, the noise and the chaotic behaviors are highly frequencydependent. Such a chaotic method, even if it works well for oneparticular data format, cannot work well for a wide range of dataformats.

[0036] Third, the accommodation of chaotic optical carrier is made atthe expense of useful signal bandwidth, network coverage, and networkcapacity. To enhance the probability of synchronization, the chaoticoptical carrier must possess reasonably high optical power andconsequently sacrifices the power available for the data. A simplesignal-to-noise argument leads us to the conclusion that the networkcapacity and network reach will significantly drop due to excessivepower in the chaotic carrier.

[0037] Fourth, the network must agree on a fixed configuration of thechaotic lasers for both transmitters and receivers. Once theeavesdropper acquires or learns this information, the entire networkwill be open to this eavesdropper. The method in accordance with thepresent invention, on the other hand, can vary the security coding frompacket to packet for every wavelength channel.

[0038] (ii) Quantum Optical Encryption

[0039] The second method applies optical encryption at the quantum levelby using the state of photons (e.g., polarization of the photons) todetect a security breach. The main idea behind this approach is theencoding of the information in a string of randomly chosen states ofsingle photons. Anyone trying to eavesdrop by tapping part of the lightmust perform a measurement on the quantum state, thus modifying thestate of the light. This modification of the state of the photons canthen be used to detect a security breach. A representative referencepertaining to this subject matter is C. Bennett et al., “ExperimentalQuantum Cryptography”, Journal of Cryptology, Vol. 5, No. 3, 1992. Oneof the fundamental problems of this technique is that it is slow (datarates of only a few Mb/sec can be accommodated) and it can only beapplied to communications that span short distances (a few Km).Furthermore, when the optical signal travels relatively long distances,the polarization of the photons may change (even if polarizationdispersion fiber is used). This will generate a false alarm. Finally,another problem that arises is whether an attack (security breach) maybe carried out that will be undetectable to the parties involved in thesecure communication (i.e., the polarization of the photons does notchange when an eavesdropper taps part of the light).

[0040] (iii) Spread Spectrum Techniques in Optical Domain

[0041] The third approach uses the spread spectrum technique todistribute the information packets to a number of different wavelengths.The section that follows tries to identify how this new techniquecompares to the classical spread spectrum techniques that are currentlybeing used to provide security in mobile systems.

[0042] Spread spectrum communication was originated 60 years ago; themain purpose then was to protect military communication signals againstjamming. In that scheme, frequency hopping and frequency agile multipleaccess (FDMA) techniques were employed. Later on, CDMA (code-divisionmultiple access) and SDMA (space-division multiple access) weredeveloped to enhance the communication channel capacity and performance.

[0043] The CDMA method can increase the channel capacity by almost10-fold over other access methods, but it is sensitive to bothterrestrial signal interference and the noise added in-band by thesimultaneous presence of multiple users. Thus, transmitter power controland forward error control (FEC) adjustment is very crucial to theperformance of CDMA systems. These systems operate with low bit errorrate (B ER) (10⁻³ is a typical number) and low data rates (on the orderof Kbps).

[0044] The inventive OLS AS multicast mechanism combines all threeapproaches employed in the RF domain, namely, frequency hopping andfrequency division multiple access (FDMA), CDMA, and SDMA. Rather thanincreasing the system access capacity at the expense of adding noise inthe signal band, a different view of the performance andbandwidth/capacity management in dense WDM optical networks is taken.The abundant bandwidth provided by the WDM optical cross-connects withmore wavelengths (e.g., 128) at higher bit rates (10 Gb/s) is traded foreach fiber port.

[0045] From this foregoing discussion of the art pertaining to detailsof secure and survivable communications, it is readily understood thatthe art is devoid of teachings and suggestions wherein sub-carriermultiplexed packet data payload and multiple sub-carrier headers(including old and new ones) are deployed so that a >2.5 Gbps IP packetcan be routed through a national all-optical multicast VVDM network bythe (successive) guidance of these sub-carrier headers, with the totalnumber of sub-carrier headers that can be written is in the range offorty or more, to therefore foster a secure and survivable network.

SUMMARY OF THE INVENTION

[0046] These and other shortcomings and limitations of the prior art areobviated, in accordance with the present invention, by a methodology andconcomitant circuitry for multicasting an input data payload receivedfrom a source over an optical network to a plurality of destinations bysupplying appropriate multicasting information as part of the headerinformation.

[0047] In accordance with a broad system aspect of the presentinvention, a A system for multicasting a data payload through an opticalnetwork composed of a plurality of nodes interconnected by links whereina given one of the nodes multicasts over two outgoing links, the datapayload having a given format and protocol, the system includes (a) aroute generator for generating and storing a local routing look-up tablein each of the nodes, each local look-up table listing local addressesfor determining alternative local routes through each of the nodes; (b)an adder for adding two headers to the data payload with each of theheaders being embedded in the same wavelength as the data payload priorto inputting the data payload at an input one of the nodes to produce anoptical signal, each of the headers having a format and protocol andconveying multicast information indicative a local route through thegiven node for the data payload and the headers, the format and protocolof the data payload being independent of the format and protocol of theheaders; (c) a detector for detecting the multicast information at thegiven one of the nodes to determine two switch control signals withreference to the multicast information as the data payload and theheaders propagate through the optical network; (d) an optical splitterfor splitting the optical signal into two split optical signals; (e) aselector for selecting two local routes through the given one of thenodes in correspondence to the two switch control signals; (f) anoptical switch having input ports and output ports wherein one of thesplit optical signals couples to a first input port and the second ofthe split optical signals couples to a second input port, and whereinone of the outgoing links couples to a first output port and the secondof the outgoing links couples to a second output port; and (g) a switchcontroller, coupled to the optical switch and responsive to the twoswitch control signals, for switching the optical switch in response tothe multicast information to optically couple the first input port withthe first output port and the second input port with the second outputport, wherein the headers are conveyed by a single sideband signaloccupying a given frequency band above the data payload, the detectorfurther comprising (i) an opto-electrical converter for converting theoptical signal to detect the headers, and (ii) a processor, coupled toopto-electrical converter, for processing the headers to detect themulticast information, the system further comprising (1) an opticalnotch filter for filtering the optical signal with a reflective part ofthe notch filter to delete the headers and recover the data payload, and(2) means, coupled to the notch filter, for inserting newsingle-sideband headers at the given frequency band into the opticalsignal in place of the deleted headers.

BRIEF DESCRIPTION OF THE DRAWINGS

[0048] The teachings of the present invention can be readily understoodby considering the following detailed description in conjunction withthe accompanying drawings, in which:

[0049]FIG. 1 is a prior-art pictorial representation of a generalnetwork illustrating the coupling between the optical and electricallayers of the network affected by the present invention;

[0050]FIG. 2 illustrates the prior-art optical layer of the network ofFIG. 1 showing the relationship between the optical signal header anddata payload, and the use of the header/payload in network setup;

[0051]FIG. 3 is a high-level block diagram of one prior-art Plug & Playmodule affected by the present invention for header encoding and headerremoval;

[0052]FIG. 4 is a high-level block diagram of another prior-art Plug &Play module affected by the present invention for routing a packetthrough a WDM network element;

[0053]FIG. 5 is illustrative of a WDM circuit-switched backbone network;

[0054]FIG. 6 illustrates a network element of FIG. 1 with an embeddedprior-art switch and the use of a prior-art local routing table;

[0055]FIG. 7 illustrates a conceptual view of substantive changes to thearrangement of FIG. 6 to effect multicasting in accordance with thepresent invention;

[0056]FIG. 8 depicts an illustrative embodiment of an optical switchingarrangement to multicast a single incoming optical signal over twooutput paths;

[0057]FIG. 9 depicts an illustrative embodiment of the optical switchingarrangement of FIG. 8 to multicast two incoming optical signals over twooutput paths;

[0058]FIG. 10 depicts an illustrative embodiment of the opticalswitching arrangement of FIG. 8 to multicast two incoming opticalsignals, each delivered by a separate composite signal, over two outputpaths;

[0059]FIG. 11 depicts the arrangement of FIG. 10 wherein the conceptualoptical switch used to explain multicasting is removed to reveal thephysical realization of an exemplary multicasting switching arrangement;

[0060]FIG. 12 depicts yet another illustrative embodiment of a switchingarrangement to multicast more than two incoming signals composing anincoming composite optical signal;

[0061]FIG. 13 is a grouping of elements from FIG. 12 used as abuilding-block optical system useful for scaling a multicast switchingnode;

[0062]FIG. 14 depicts use of the building-block optical system in a morecomplex illustrative embodiment of a multicasting switching arrangement;

[0063]FIG. 15A depicts a layout of a conventional header/data payloadcombination and accompanying spectrum;

[0064]FIG. 15B depicts a layout of a header/data payload of thepresented invention, along with the frequency spectrum, formulticasting;

[0065]FIG. 15C repeats FIG. 15A for ease of comparison to FIGS. 15D and15E;

[0066]FIG. 15D depicts the location of multicast information inaccordance with the present invention wherein the multicast informationis conveyed by a single sub-carrier;

[0067]FIG. 15E depicts the location of multicast information inaccordance with the present invention wherein the multicast informationis conveyed by a plurality of sub-carriers;

[0068]FIG. 16 is a high-level block flow diagram for multicasting in anoptical network;

[0069]FIG. 17 depicts a block diagram of an illustrative embodiment of aheader encoder circuit for the Plug-&-Play module of FIG. 3;

[0070]FIG. 18 depicts a block diagram of an illustrative embodiment of aheader remover circuit for the Plug-&-Play module of FIG. 3;

[0071]FIG. 19 depicts a block diagram of an illustrative embodiment of aheader detector circuit for the Plug-&-Play module of FIG. 4;

[0072]FIG. 20 depicts a block diagram for a more detailed embodiment ofFIG. 4 wherein the label-switch controller includes interposeddemultiplexers, header detectors, and fast memory;

[0073]FIG. 21 is a flow diagram for the processing effected by eachlabel-switch controller of FIG. 20;

[0074]FIG. 22 is a block diagram of circuitry for detecting the activeheader signal and for inserting a new active header signal without localinjection of light;

[0075]FIG. 23 is a block diagram of re-set circuitry for deleting allincoming header signals, and for inserting a new original header signal;

[0076]FIG. 24 is a block diagram of circuitry for detecting the activeheader signal and for inserting a new active header signal using thelocal injection of light;

[0077]FIG. 25 is a block diagram of circuitry for removing a singleheader signal and replacing the removed header signal with a new headersignal;

[0078]FIG. 26 is a block diagram of circuitry for removing the headerwith the reflective part of a notch filter and for inserting a newsingle-sideband modulated header;

[0079]FIG. 27 is a block diagram of circuitry for the detecting theheader with the transmission part of the notch filter, for removing theheader with the reflective part of a notch filter, and for inserting anew single-sideband modulated header;

[0080]FIG. 28 depicts a high-level block diagram of the location ofoptical link security devices in the backbone network in accordance withthe present invention;

[0081]FIG. 29 shows an illustrative embodiment for transmitting packetsover disjoint paths and over a subset of wavelengths;

[0082]FIGS. 30A and 30B show illustrative embodiments for transmitting asubset of packets over disjoint paths without submitting all the packetsof a session over a single path;

[0083]FIG. 31 is a high-level block diagram of the transmit opticalnetwork module in accordance with the present invention;

[0084]FIG. 32 illustrates the manner of transmitting and receivingpacket streams from multiple optical links using the optical switchfabric;

[0085]FIG. 33 is a high-level block diagram of the receive opticalnetwork module in accordance with the present invention;

[0086]FIG. 34 is a high-level block diagram flow chart for the operationof the OLSAS system;

[0087] FIGS. 35A and FIG. 35B depict the arrangement of the securityfeatures information in a traditional use and as deployed in the WDMsub-carrier label-switching arrangement;

[0088]FIG. 36A depicts a high-level block diagram of an opticalnon-multicast network, the SOLC module, and the way the SOLC modulesends synchronizing information to the secure optical network modules;

[0089]FIG. 36B is analogous the arrangement of FIG. 36A with theelements now being served by an interposed optical multicast network;

[0090]FIG. 37A repeats FIG. 35A for ease of comparison to FIGS. 37B and37C;

[0091]FIG. 37B depicts arrangement of the security features informationand optical labels as deployed in the WDM sub-carrier label-switchingarrangements in accordance with the present invention for a singlesub-carrier;

[0092]FIG. 37C depicts arrangement of the security features informationand optical labels as deployed in the WDM sub-carrier label-switchingarrangements in accordance with the present invention for multiplesub-carriers;

[0093]FIG. 38 is a high-level block diagram flow chart for the operationof the OLSAS system with multicasting;

[0094]FIG. 39 is a high-level block diagram of a virtual private networkusing the principles of multicasting; and

[0095]FIGS. 40A and 40B depict header layouts for a virtual privatenetwork.

[0096] To facilitate understanding, identical reference numerals havebeen used, where possible, to designate identical elements that arecommon to the figures.

DETAILED DESCRIPTION

[0097] In order to gain an insight into the fundamental principles inaccordance with the present invention as well as to introduceterminology useful in the sequel, an overview of the optical network ofChang is first presented, followed by an elucidation of an illustrativeembodiment of the present inventive subject matter overlaid on thenetwork of Chang.

[0098] 1.) Overview

[0099] The present invention relates, in its most general aspect, to amulticasting network for realizing low latency, high throughput, andcost-effective bandwidth-on-demand for large blocks of data for NGIapplications. A cost-effective and interoperable upgrade to the networkdescribed in Chang (U.S. Pat. No. 6,111,673) is realized by interposinga newly devised optical switch on the existing VDM network elements toeffect so-called “WDM multicast optical label-switching” or,synonymously, “multicast optical label-switching” (referred to as“optical tag-switching” in Chang). The invention impacts both thehardware and software for the conventional NGI network from allperspectives, including architecture, protocol, network management,network element design, and enabling technologies. As suggested, themethodology carried out by the network and concomitant circuitry forimplementing the network are engendered by a technique called WDMmulticast optical label-switching—defined as the dynamic generation ofrouting paths for a burst duration by an in-band optical signalingheader(s).

[0100] To understand the principles of the present invention, as well asintroduce terminology for the present invention, it is most expeditiousto understand the teachings and suggestions of Chang as the basis uponwhich to elucidate the points of departure of the present invention.

[0101] 1.1) Overview of Chang

[0102] As described in Chang, data packets are routed through the WDMnetwork using an in-band WDM signaling header for each packet. At aswitching node, the signaling header is processed and the header and thedata payload (1) may be immediately forwarded through an alreadyexisting flow state connection, or (2) a path can be setup for a burstduration to handle the header and the data payload. WDM label-switchingenables highly efficient routing and throughput, and reduces the numberof IP-level hops required by keeping the packets routing at the opticallevel to one hop as managed by the NC&M (Network Control & Management)which creates and maintains routing information.

[0103] The depiction of FIG. 1, which is the same as FIG. 1 of Chang,shows the inter-relation between optical layer 120 and electrical layer110 of generic network 100 as provided by intermediate layer 130coupling the optical layer and the electrical layer. Electrical layer110 is shown, for simplicity, as being composed of two conventional IProuters 111 and 112. Optical layer 120 is shown as being composed ofnetwork elements or nodes 121-125 (Node 1-Node 5). Intermediate layer130 depicts conventional ATM/SONET system 131 coupling IP router 112 tonetwork element 122. Also shown as part of layer 130 is header network132 which couples IP router 111 to network element 121. FIG. 1pictorially illustrates the location of network 132 on a national-scale,transparent WDM-based backbone network with full interoperability andreconfigurability. It is important to emphasize at this point that thefocus in accordance with the present invention is on network element132. Moreover, the elements of FIG. 1 are illustrative of one embodimentin accordance with the present invention. Thus, for example, element 111may, in another embodiment, be an ATM router or even a switch.

[0104] Now with reference to FIG. 2, which is the same as FIG. 2 ofChang, optical layer 120 of FIG. 1 is shown in more detail including thebasic technique for setting up a fast connection in optical network 200,composed of network elements 121-125 (Node 1-Node 5); the setup usesoptical signaling header 210 for the accompanying data payload 211. Thistechnique combines the advantages of circuit-switched based WDM andpacket-switched based IP technologies. Signaling information is added inthe form of an optical signal header 210 which is carried in-band withineach wavelength in the multi-wavelength transport environment. Opticalsignaling header 210, composed of a label containing routing and controlinformation such as the source, destination, priority, and the length ofthe packet, propagates through optical network 200 preceding datapayload 211. Each WDM network element 121-125 senses optical signalingheader 210, looks-up a connection table (discussed later), and takesnecessary steps such as cross-connections, add, drop, ordrop-and-continue. The connection table is constantly updated bycontinuous communication between NC&M 220 and WDM network elements121-125. Data payload 211, which follows optical signaling header 210,is routed through a path in each network element (discussed later) asestablished by the connection. With the arrangement of FIG. 2, there isno need to manage the time delay between optical signaling header 210and data payload 211, shown by T in FIG. 2, because each network elementprovides the optical delay needed for the short time required forconnection set-up within each network element via delay of an interposedfiber. Moreover, the format and protocol of the data payload isindependent of that of the header, that is, for a given network whereasthe format and protocol of the header are pre-determined, the format andthe protocol of the data payload can be the same as or different fromthose of the header.

[0105] Each destination is associated with a preferred path which wouldminimize ‘the cost’—in FIG. 2, the overall path from source 123 todestination 122 includes paths 201 and 202 in cascade, both utilizingwavelength WP. This cost is computed based on the total propagationdistance, the number of hops, and the traffic load. The preferredwavelength is defaulted to the original wavelength. For example, thepreferred wavelength on path 202 is WP. If this preferred path at thedefault wavelength is already occupied by another packet, then networkelement 121 quickly decides if there is an available alternatewavelength WA through the same preferred path. This alternate wavelengthmust be one of the choices offered by the limited wavelength conversionin network element 121. If there is no choice of wavelengths whichallows transport of the packet through the most preferred path, the nextpreferred path is selected (path deflection). For example, in FIG. 2,paths 203 and 204 in cascade may represent the alternative path. At thispoint, the preferred wavelength will default back to the originalwavelength WP. The identical process of looking for an alternatewavelength can proceed if this default wavelength is again alreadyoccupied. In FIG. 2, path 203 is an alternative path with the samewavelength WP, and path 204 is an alternate path using alternatewavelength WA. In an unlikely case where there is no combination of pathand wavelength deflection can offer transport of the packet, networkelement 121 will decide to drop the packet of lower priority. In otherwords, the new packet transport through the preferred path at theoriginating wavelength takes place by dropping the other packet of thelower priority which is already occupying the preferred path.

[0106] Network elements 121-125 are augmented with two types ofso-called ‘Plug-and-Play’ modules to efficiently handle bursty trafficby providing packet switching capabilities to conventionalcircuit-switched WDM network elements 121-125 whereby signaling headersare encoded onto IP packets and are removed when necessary.

[0107] The first type of ‘Plug-and-Play’ module, represented byelectro-optical element 132 of FIG. 1, is now shown in block diagramform in FIG. 3, which is the same as FIG. 3 of Chang. Whereasconceptually module 132 is a stand-alone element, in practice, module132 is integrated with network element 121 as is shown in FIG. 3; module132 is interposed between compliant client interface (CCI) 310 ofnetwork element 121 and IP router 111 to encode optical signaling header210 onto the packets added into the network via header encoder 321, andto remove optical signaling header 210 from the packets dropping out ofthe network via header remover 322.

[0108] Generally, encoding/removing module 132 is placed where the IPtraffic is interfaced into and out of the WDM network, which is betweenthe client interface of the network element and the IP routers. Theclient interfaces can be either a CCI-type or a non-compliant clientinterfaces (NCI)-type. At these interfaces, header encoder 321 putsoptical header 210 carrying the destination and other information infront of data payload 211 as the IP signal is transported into network200. Optical header 210 is encoded in the optical domain by an opticalmodulator (discussed later). Signaling header remover 322 deletes header210 from the optical signal dropped via a client interface, and providesan electrical IP packet to IP router 111.

[0109] More specifically, module 132 accepts the electrical signal fromIP router 111, converts the electrical signal to a desired compliantwavelength optical signal, and places optical header 210 in front of theentire packet. Module 132 communicates with NC&M 220 and buffers thedata before optically converting the data if requested by NC&M 220.Module 132 employs an optical transmitter (discussed later) with thewavelength matched to the client interface wavelength. (As indicatedlater but instructive to mention here, module 132 is also compatiblewith NCI 404 of FIG. 4 since the wavelength adaptation occurs in theNCI; however, the bit-rate-compatibility of NCI wavelength adaption andthe IP signal with optical headers must be established in advance.)

[0110]FIG. 4, which is the same as FIG. 4 of Chang, depicts a secondtype of ‘Plug-and-Play’ module, optical element 410, which is associatedwith each WDM network element 121-125, say element 121 for discussionpurposes. Module 410 is interposed between conventional network elementcircuit switch controller 420 and conventional switching device 430.Module 410 detects information from each signaling header 210propagating over any fiber 401-403, as provided to module 410 by tappedfiber paths 404-406. Module 410 functions to achieve very rapid tablelook-up and fast signaling to switching device 430. Switch controller420 is functionally equivalent to the conventional “craft interface”used for controlling the network elements; however, in this case, thepurpose of this switch controller 420 is to accept the circuit-switchedsignaling from NC&M 220 and determine which control commands are to besent to label switch controller 410 based on the priority. Thus, labelswitch controller 410 receives circuit-switched control signals fromnetwork element circuit switch controller 420, as well as information asderived from each signaling each header 210, and intelligently choosebetween the circuit-switched and the label-switched control schemes. Theswitches (discussed later) comprising switching device 430 also achieverapid switching. The delay imposed by fibers 415, 416, or 416, which areplaced in input paths 401-403 to switching device 430, are such that thedelay is larger than the total time it takes to read signaling header210, to complete a table look-up, and to effect switching.Approximately, a 2 km fiber provides 10 microsecond processing time. Thetypes of WDM network elements represented by elements 121-125 and whichencompass switching device 430 include: Wavelength Add-Drop Multiplexers(WADMs); Wavelength Selective Crossconnects (WSXCs); and WavelengthInterchanging Crossconnects (WIXCs) with limited wavelength conversioncapabilities.

[0111] In operation, module 410 taps a small fraction of the opticalsignals appearing on paths 401-403 in order to detect information ineach signaling header 210, and determine the appropriate commands forswitching device 430 after looking up the connection table stored inmodule 410. The fiber delay is placed in paths 401-403 so that thepacket having header 210 and payload 211 reaches switching device 430only after the actual switching occurs. This fiber delay is specific tothe delay associated with header detection, table look-up, andswitching, and can typically be accomplished in about 10 microsecondswith about 2 km fiber delay in fibers 415-417.

[0112] Since there is no optical-to-electrical, or electrical-to-opticalconversion of data payload 211 at network elements 121-125, theconnections are completely transparent. Contrary to IP routing, where amultiplicity of bit-rates and lower-level protocols increases the numberof different interfaces required and consequently the cost of therouter, routing by WDM label switching is transparent to bit-rates. Byway of illustration, optical routing by network elements 121-125 is ableto achieve 1.28 Th/sec throughput (16×16 cross-connect switching device430 with 32 wavelengths/fiber at 2.5 Gb/sec per wavelength) which ismuch larger than any of the current gigabit routers.

[0113] Each network element 121-125 in combination with NC&M 220 effectsa routing protocol which is adaptive; the routing protocol performs thefollowing functions: (a) measures network parameters, such as state ofcommunication lines, estimated traffic, delays, capacity utilization,pertinent to the routing strategy; (b) forwards the measured informationto NC&M 220 for routing computations; (c) computes of the routing tablesat NC&M 220; (d) disseminates the routing tables to each network element121-125 to have packet routing decisions at each network element. NC&M220 receives the network parameter information from each networkelement, and updates the routing tables periodically, then (e) forwardsa connection request from an IP router such as element 111 to NC&M 220,and (f) forwards routing information from the NC&M 220 to each networkelement 121-125 to be inputted in optical signaling header 210.

[0114] Packets are routed through network 200 using the information insignaling header 210 of each packet. When a packet arrives at a networkelement, signaling header 210 is read and either the packet (a) isrouted to a new appropriate outbound port chosen according to the labelrouting look-up table, or (b) is immediately forwarded through analready existing label-switching originated connection within thenetwork element. The latter case is referred to as “flow switching” andis supported as part of optical label-switching; flow switching is usedfor large volume bursty mode traffic.

[0115] Label-switched routing look-up tables are included in networkelements 121-125 in order to rapidly route the optical packet throughthe network element whenever a flow switching state is not set-up. Theconnection set-up request conveyed by optical signaling header 210 israpidly compared against the label-switch routing look-up table withineach network element. In some cases, the optimal connections for themost efficient signal routing may already be occupied. The possibleconnection look up table is also configured to already provide analternate wavelength assignment or an alternate path to route thesignal. Providing a limited number of (at least one) alternativewavelength significantly reduces the blocking probability. Thealternative wavelength routing also achieves the same propagation delayand number of hops as the optimal case, and eliminates the difficultiesin sequencing multiple packets. The alternate path routing canpotentially increase the delay and the number of hops, and the signal-tonoise-ratio of the packets are optically monitored to eliminate anypossibility of packets being routed through a large number of hops. Inthe case where a second path or wavelength is not available, contentionat an outbound link can be settled on a first-come, first-serve basis oron a priority basis. The information is presented to a regular IP routerand then is reviewed by higher layer protocols, using retransmissionwhen necessary.

[0116] 1.2) Routing Example

[0117] An illustrative WDM circuit-switched backbone network 500 forcommunicating packets among end-users in certain large cities in theUnited States is shown in pictorial form in FIG. 5 (the same as FIG. 5in Chang)—network 500 is first discussed in terms of its conventionaloperation, that is, before the overlay of WDM multicast optical labelswitching in accordance with the present invention is presented.

[0118] With reference to FIG. 5, it is supposed that New York City isserved by network element 501, Chicago is served by network element 502,. . . , Los Angeles is served by network element 504, . . . , andMinneapolis by network element 507. (Network elements may also bereferred to a nodes in the sequel.) Moreover, NC&M 220 has logicalconnections (shown by dashed lines, such as channel 221 to networkelement 501 and channel 222 to network element 507) to all networkelements 501-507 via physical layer optical supervisory channels; thereis continuous communication among NC&M 220 and network elements 501-507.NC&M 220 periodically requests and receives information about: (a) thegeneral state of each network element (e.g., whether it is operationalor shut down for an emergency); (b) the optical wavelengths provided byeach network element (e.g., network element 501 is shown as being servedby optical fiber medium 531 having wavelength W1 and optical fibermedium 532 having wavelength W2 which connect to network elements 502(Chicago) and 505 (Boston), respectively); and (c) the ports which areserved by the wavelengths (e.g., port 510 of element 501 is associatedwith an incoming client interface conveying packet 520, port 511 isassociated with W1 and port 512 is associated with W2, whereas port 513of element 502 is associated with W1).

[0119] Thus, NC&M 220 has stored at any instant the global informationnecessary to formulate routes to carry the incoming packet traffic bythe network elements. Accordingly, periodically NC&M 220 determines therouting information in the form of, for example, global routing tables,and downloads the global routing tables to each of the elements usingsupervisory channels 221, 222, . . . . The global routing tablesconfigure the ports of the network elements to create certaincommunication links. For example, NC&M 220 may determine, based upontraffic demand and statistics, that a fiber optic link from New YorkCity to Los Angeles (network elements 501 and 504, respectively) ispresently required, and the link will be composed, in series, of: W1coupling port 511 of element 501 to port 513 in network element 502; W1coupling port 514 of element 502 to port 515 of element 503; and W2coupling port 516 of element 503 to port 517 of element 504. Then, inputpacket 520 incoming to network element 501 (New York City) and having adestination of network element 504 (Los Angeles) is immediately routedover this established link. At network element 504, the propagatedpacket is delivered as output packet 521 via client interface port 518.

[0120] In a similar manner, a dedicated path between elements 506 and507 (St. Louis and Minneapolis, respectively) is shown as establishedusing W2 between network elements 506 and 502, and W3 between elements502 and 507.

[0121] Links generated in this manner—as based upon the global routingtables—are characterized by their rigidity, that is, it takes severalseconds for NC&M 220 to determine the connections to establish thelinks, to download the connectivity information for the links, andestablish the input and output ports for each network element. Each linkhas characteristics of a circuit-switched connection, that is, it isbasically a permanent connection or a dedicated path or “pipe” for longintervals, and only NC&M 220 can tear down and re-establish a link innormal operation. The benefit of such a dedicated path is that traffichaving an origin and a destination which maps into analready-established dedicated path can be immediately routed without theneed for any set-up. On the other hand, the dedicated path can be, andmost often is, inefficient in the sense that the dedicated path may beonly used a small percentage of the time (e.g., 20%-50% over the set-upperiod). Moreover, switching device 430 (see FIG. 4) embedded in eachnetwork element which interconnects input and output ports has only afinite number of input/output ports. If the above scenario is changed sothat link from St. Louis to Minneapolis is required and a port alreadyassigned to the New York to Los Angeles link is to be used (e.g., port514 of network element 502), then there is a time delay until NC&M 220can respond and alter the global routing tables accordingly.

[0122] 1.3) Label-Switching of Chang

[0123] Now the example of FIG. 5 is expanded to overlay the details oflabel-switching, as taught by Chang, on the above description. NC&M 220is further arranged so that it may assign the label-switch state to eachpacket incoming to a network element from a client interface—thelabel-switch state is appended by Plug & Play module 132 and, for thepurposes of the present discussion, the label-switch state iscommensurate with header 210 (see FIG. 2). The label-switch state iscomputed by NC&M 220 and downloaded to each network element 501-507 inthe form of a local routing table. With reference to FIG. 6, there isshown network element 501 and its embedded switch 601 in pictorial form.Also shown is incoming optical fiber 602, with delay loop 603, carryingpacket 620 composed of header 210 and payload 211—payload 211 in thiscase is packet 520 from FIG. 5. Fiber 6022 delivers a delayed version ofpacket 620 to network element 501. Also, a portion of the light energyappearing on fiber 602 is tapped via fiber 6021 and inputted to opticalmodule 410 which processes the incoming packet 620 to detect header210—header 210 for packet 620 is shown as being composed of thelabel-switch state ‘11101011000’, identified by reference numeral 615.Also shown in FIG. 6 is local look-up table 610, being composed of twocolumns, namely, “Label-Switch State” (column 611), and “Local Address”(column 612). The particular label-switch state for packet 620 iscross-referenced in look-up table 610 to determine the routing of theincoming packet. In this case, the label-switch state for packet 620 isthe entry in the fourth row of look-up table 610. The local switchaddress corresponding to this label-switch state is “0110”, which isinterpreted as follows: the first two binary digits indicate theincoming port, and the second two binary digits indicate the outputport. In this case, for the exemplary four-input, four-output switch,the incoming packet is to be routed from input port “01” to output port“10”, so switch 601 is switched accordingly (as shown). After the delayprovided by fiber delay 603, the incoming packet on fiber 6022 ispropagated onto fiber 604 via switch 601.

[0124] The foregoing description of label-switch state indicates how itis used. The manner of generating the label-switch state is nowconsidered. NC&M 220, again on a periodic basis, compiles a set of locallook-up tables for routing/switching the packet through eachcorresponding network element (such as table 610 for network element501), and each look-up table is then downloaded to the correspondingnetwork element. The generation of each look-up table takes into accountNC&M 220's global knowledge of the network 500. For instance, ifincoming packet 620 to network 501 is destined for network 504 (again,New York to Los Angeles), if port 510 is associated with incoming port“01” and serves fiber 602, and if outgoing port 511 is associated withoutgoing port “10” and serves fiber 604, then NC&M 220 is able togenerate the appropriate entry in look-up table 610 (namely, the fourthrow) and download table 610 to network element 510. Now, when packet 520is processed by electro-optical module 132 so as to add header 210 topacket 520 to create augmented packet 620, NC&M 220's knowledge of thedownloaded local routing tables as well as the knowledge of thedestination address embedded in packet 520 as obtained via module 132enables NC&M 220 to instruct module 132 to add the appropriatelabel-switch state as header 210—in this case ‘11101011000’.

[0125] It can be readily appreciated that processing a packet using thelabel-switch state parameter is bursty in nature, that is, after switch601 is set-up to handle the incoming label-switch state, switch 601 maybe returned to its state prior to processing the flow state. Forexample, switch 601 may have interconnected input port ‘01’ to outputport ‘10’ prior to the arrival of packet 620, and it may be returned tothe ‘0110’ state after processing (as determined, for example, by apacket trailer). Of course, it may be that the circuit-switched path isidentical to the label-switch state path, in which case there is no needto even modify the local route through switch 601 for processing thelabel-switch state. However, if it is necessary to temporarily alterswitch 601, the underlying circuit-switched traffic, if any, can bere-routed or re-sent.

[0126] As discussed so far, label switching allows destination orientedrouting of packets without a need for the network elements to examinethe entire data packets. New signaling information—the label—is added inthe form of optical signal header 210 which is carried in-band withineach wavelength in the multi-wavelength transport environment. Thislabel switching normally occurs on a packet-by-packet basis. Typically,however, a large number of packets will be sequentially transportedtowards the same destination. This is especially true for bursty datawhere a large block of data is segmented in many packets for transport.In such cases, it is inefficient for each particular network element tocarefully examine each label and decide on the routing path. Rather, itis more effective to set up a “virtual circuit” from the source to thedestination. Header 210 of each packet will only inform continuation orending of the virtual circuit, referred to as a flow state connection.Such an end-to-end flow state path is established, and the plug-and-playmodules in the network elements will not disrupt such flow stateconnections until disconnection is needed. The disconnection will takeplace if such a sequence of packets has come to an end or another packetof much higher priority requests disruption of this flow stateconnection.

[0127] The priority aspect of optical label-switching is also shown withrespect to FIG. 6. The local look-up table has a “priority level”(column 613) which sets forth the priority assigned to thelabel-switching state. Also, header 210 has appended priority data shownas the number ‘2’ (reference numeral 616). Both the fourth and fifth rowin the “label-switch state” column 611 of table 610 have a local addressof ‘0110.’ If an earlier data packet used the entry in the fifth row toestablish, for example, a virtual circuit or flow switching state, andthe now another packet is processed as per the fourth row of column 611,the higher priority data (‘2’ versus ‘4’, with ‘1’ being the highest)has precedent, and the virtual circuit would be terminated.

[0128] 1.4) Optical Multicasting in Accordance with the PresentInvention

[0129] One point of departure over the prior art in accordance with thepresent invention is initially best described with reference to FIG. 7,which depicts the substantive changes to FIG. 6 to effect opticalmulticasting for one embodiment of the present invention. In FIG. 7,packet 701 is composed of payload 211 and header 710; header 710 isfurther composed of two sub-headers 711 and 712. Header detector 730,arranged to receive a portion of the light energy appearing on fiber 602tapped via fiber 6021, processes the incoming packet 701 to detectsub-headers 711 and 712. Sub-header 711, for illustrative purposes,contains the label-switch state ‘11101011000’, identified by referencenumeral 715. In addition, sub-header 712 conveys, illustratively,‘11111011011’, identified by reference numeral 716. A pertinent portionof local look-up table 710, which is the counterpart to table 610 ofFIG. 6, is shown in FIG. 7; FIG. 7 depicts label switch states 713 andlocal addresses 714. The particular label-switch states conveyed bypacket 701 are cross-referenced in look-up table 710 to determine therouting of the incoming packet. In this example, the label-switch statesfor packet 701 correspond to the entries in the fourth and second rowsof the label switch column 713 of look-up table 710, respectively, forsub-headers 711 and 712. Using these rows as a cross-reference to localaddress column 714 then, conceptually, packet 701 arriving at input port721 (IN-‘00’) of multicast optical switch 720 via optical path 6022 isto be concurrently switched to both output ports 722 (OUT-‘00’) and 723(OUT-‘10’) to effect multicasting, with the split packets then beingpropagated concurrently over output paths 704 and 705, respectively. (Itshould be noted in the disclosure of Chang, a packet appearance at aninput port is precluded from being concurrently switched to two outputports because of the structural limitations inherent in optical switch601 of FIG. 6.)

[0130] The essence of optical multicasting is the arrangement of opticalswitch 720 to physically implement what has just been describedconceptually, namely, effecting the multiple switching of a packetarriving at an input port to deliver representative versions of thepacket to a plurality of output ports and, in turn, to a plurality ofoptical paths coupled to these ports. One embodiment of such an opticalswitch arrangement is now discussed, commencing with reference to FIG.8.

[0131] In FIG. 8, composite optical signal A, appearing on optical path801, serves as an input to optical demultiplexer 805. Demultiplexer 805produces at its output the individual optical wavelengths which composeoptical signal A, namely in this illustrative embodiment, twowavelengths λ_(1A) and λ_(2A) appearing on leads 811 and 812,respectively; the individual optical signals being conveyed by thesewavelengths are denoted by signals A1 and A2, respectively. Delayedversions of the signals appearing on paths 811 and 812 serve as inputsto composite optical switch 830; delay is accomplished, for example, byoptical delay lines 8111 and 8121, respectively.

[0132] The focus of FIG. 8 is on the processing of optical signal A1conveyed by λ_(1A) on optical path 811 as A1 arrives at the input tocomposite optical switch 830 via delay line 8111. (Switch 830 is shownas dashed because it is being used as a conceptual aid to link FIGS. 7and 8; it will be removed in the sequel once the link between FIGS. 7and 8 is explained). Switch 830 can be visualized as a 4×4 switch havinginput ports 831, . . . , 834 and output ports 835, . . . , 838. Opticalsignal A1 is split into two counterparts via 1×2 optical splitter 841.One of the two split signals serves as an input to 4×4 optical switch851, via input port ‘00’, and the other split signal appears at inputport ‘01’ of switch 851. Switch 851, along with similar 4×4 switch 852,compose conceptual composite optical switch 830. Optical signal A1 alsoserves as an input to header detector 820, which is depicted asstripping the header from signal A1 to produce ‘HEADER A1’. For thisexample, it is presumed that the header of signal A1 has twosub-headers, namely, header 821 (‘HA11’) and header 822 (‘HA12’).Moreover, if these sub-headers convey information commensurate withheaders 715 and 716, respectively, of FIG. 7, then A1 is to be switchedconcurrently from port 831 (IN-‘00’) to output ports 835 (OUT-‘00’) and837 (OUT-‘10’) of composite conceptual switch 830. In turn, thisrequires that optical switch 851 operates to switch the signal appearingat its ‘00’ input port (the first split version of A1) to its ‘00’output port, and concurrently, switch 851 operates to switch the signalappearing at its ‘01’ input port (the second split version of Al) to its‘10’ output port—via dashed connections 805 and 806, respectively,through switch 851. To effect this operation of switch 851, header HA11points to local address ‘0000’ and header HA12 points to local address‘0110’.

[0133] Signal A1 appearing at output port ‘00’ of switch 851 is coupledto one input port of 2×1 optical combiner 861, with the other input portof combiner 861 being coupled to output port ‘01’ of switch 851.Similarly, signal A1 appearing at output port ‘10’ serves as a firstinput to optical combiner 862, with the other input to combiner 862being provided by output port ‘11’ of switch 851. In turn, combiner 861serves as one input to wideband multiplexer 871 (e.g., a coupler),whereas combiner 862 provides one input to wideband multiplexer 872. Itis now apparent that input optical signal A1 appearing at the output ofdemultiplexer 805 is thereby propagated from each multiplexer 871 and872 over output optical paths 873 and 874, respectively, whenevermulticasting of optical signal A1 is required.

[0134] By way of terminology, a “local route” through a node or networkelement can now be understood with reference to FIG. 8. For example, onelocal route of optical signal A1 as it travels from input demultiplexer805 to output link 873 is via the following sequence of optical elementsand optical paths: (a) optical path 811; (b) optical delay line 8111;(c) optical splitter 841; (d) optical switch 851 via internalcross-connect path 805; (e) optical combiner 861; (f) optical path 863from combiner 861 to multiplexer 871; and (g) output optical link 873from multiplexer 871. Generally, then, a “local route” or (“route” forshort) is the overall cascade of elements and paths traversed by aninput optical signal to propagate from an input port of a node/networkelement to an output port of the node/network element.

[0135] With reference to FIG. 9, as is readily contemplated, switch 851also operates to switch the optical signal A2 appearing on optical path812 to effect multicasting. Splitter 842 and input ports ‘10’ and ‘11’along with output ports ‘01’ and ‘11’ are the functional counterparts tosplitter 841 and the ‘00’ and ‘01’ input ports and the ‘00’ and ‘10’output ports, respectively. In FIG. 9, the internal switched paths forswitch 851 to achieve multicasting of both A1 and A2 are shown.Moreover, optical signal A2 propagates a header; this header (‘HEADERA2’) is detected by header processor 820 to yield two sub-headers ‘HA21’and ‘HA22’ denoted by reference numerals 923 and 924, respectively.These sub-headers conveyed by signal A2 are used to look-up localaddresses for switching optical switch 851 to couple, as shown, inputport ‘10’ to output port ‘01’, and input port ‘11’ to output port ‘11’.Optical 4×4 switch 851 is now fully utilized, that is, four activeinputs couple to four active outputs.

[0136] With reference to FIG. 10, as is further readily contemplated,switch 852 operates in a manner substantially identical to switch 851 toaccomplish multicasting of the optical signals composing optical signalB appearing on optical path 802. In FIG. 10, two optical signals aremulticast, namely, signal A1 appearing on input optical path 801 andsignal B2 appearing on input optical path 802. Optical signal B2 issplit in two by optical splitter 844. Optical switch 852 couples the‘10’ input to the ‘01’ output, and the ‘11’ input to the ‘11’ output.This switching is accomplished by information in local look-up table 710upon the processing of the header of optical signal B2 in headerdetector 820 (‘HEADER B2’). Local addresses provided by sub-headers‘HB21’ and ‘HB22’, derived from ‘HEADER B2’, serve as inputs to opticalswitch 852. In turn, the ‘01’ output of switch 852 serves as one inputto 2×1 combiner 863, and the ‘11’ output provides one input to 2×1combiner 864. The output of combiner 863 is coupled to multiplexer 871,and the output of combiner 864 couples to multiplexer 872. The opticalsignal A1 switched by switch 851 is as described with respect to FIG. 8.Thus, the output of multiplexer 871 is a composite signal havingcomponents A1, B2; likewise, the output of multiplexer 872 is the samecomposite signal A1,B2. The multicast properties of the outputs areevident.

[0137] As alluded to earlier, conceptual switch 830, used as a pictorialaid to elucidate the principles of the present invention, can now beremoved to yield the actual physical representation of one embodiment ofthe optical switching system in accordance with the present invention.The actual physical representation is shown in FIG. 11, which depictsthe same multicasting switching example as in FIG. 10, but withconceptual switch 830 removed.

[0138] In order to operate each switch 851 or 852 in the mannerdescribed with reference to FIGS. 8-11, each header must containinformation not previously conveyed by Chang. For instance, in theexample, two sub-headers for each optical signal must now be processedto obtain two local addresses. NC&M 220 is arranged with nodeinterconnection and node structure information, so the arrangement ofoptical switches such as in FIG. 11 is given information. Moreover, eachinput node, that is, the node that appends header information, isprovided sufficient information by NC&M 220 to formulate the header soas to effect the required switching at remaining network nodes. Forexample, header information may be appended to the payload at the inputnode with reference to Table 1 presuming the structure of opticalswitches 851 and 852 of FIG. 11: TABLE 1 LOCAL Switch ADDRESS Deliveroptical signal A1 to multiplexer 871 851 0000 Deliver optical signal A1to multiplexer 872 851 0110 Deliver optical signal A2 to multiplexer 871851 1001 Deliver optical signal A2 to multiplexer 872 851 1111 Deliveroptical signal B1 to multiplexer 871 852 0000 Deliver optical signal B1to multiplexer 872 852 0110 Deliver optical signal B2 to multiplexer 871852 1001 Deliver optical signal B2 to multiplexer 872 852 1111

[0139] A portion of an actual look-up table, as distinct from theconceptual information of table 710 in FIG. 7, used to switch opticalsignal A1, based upon the information of Table 1 as well as theexemplary headers shown in discussing FIG. 7, is as follows in Table 2:TABLE 2 LABEL-SWITCHING STATE LOCAL ADDRESS — — 11111011011 0110 — —11101011000 0000 — —

[0140] The illustrative embodiment of FIGS. 7-11 depicted an arrangementof optical switches 851 and 852 for a specific example of two compositeoptical signals each conveying two individual optical signals;furthermore, each individual optical signal is being propagatedutilizing a given wavelength. It is readily understood by one skilled inthe art that the example can be generalized for more than two compositesignals, two individual optical signals, and two wavelengths.

[0141] By way of generalization, reference is made to FIG. 12, which isan augmented version of FIG. 11 depicting that signal A is now composedof four wavelengths appearing on optical paths 1211, 1215, 1216, and1212. Optical path 1211 serves as an input to 1×2 splitter 1241; inturn, optical splitter 1241 provides inputs to 1×2 optical splitters1245 and 1246—this cascade of splitters is referred to as two-stagesplitting. Optical splitters 1245 and 1246 provide four split versionsof the original optical signal appearing on optical path 1211 to fourinput ports of 16×16 optical switch 1251, namely, to input ports ‘0000’,. . . , ‘0011’. Similarly, optical path 1215 serves as an input to acascade of optical 1×2 splitters (not shown, but similar to splitters1241, 1245, and 1246) and, in turn, the split optical signalsrepresentative of the optical signal appearing on optical path 1215serve as inputs to optical switch 1251 at input ports ‘0100’, . . . ,‘0111’. In addition, optical path 1216 serves as an input to anothercascade of optical 1×2 splitters (again not shown) and this splittercascade is coupled to switch 1251 via input ports ‘1000’, . . . ,‘1011’. Finally, optical path 1212 is coupled to 1×2 splitter 1242which, in turn, couples to 1×2 splitters 1247 and 1248. Splitters 1247and 1248 provide four split versions of the optical signal on path 1212to inputs to ports ‘100’ . . . ‘1111’. Optical switch 1251 is now a16×16 optical switch having input ports ‘0000’, ‘0001’, . . . , ‘1111’,and corresponding output ports ‘0000’, ‘0001’, . . . , ‘1111’.

[0142] Output ports ‘0000’ and ‘0001’ of switch 1251 couple to 2×1combiner 1265, output ports ‘0010’ and ‘0011’ couple to 2×1 combiner1266, . . . , output ports ‘1100’ and ‘1101’ couple to 2×1 opticalcombiner 1267 and, finally, output ports ‘1110’ and ‘1111’ couple to 2×1combiner 1268. In turn, combiners 1265 and 1266 provide inputs tosecond-stage 2×1 combiner 1261 and combiners 1267 and 1268 serve asinputs to second stage 2×1 combiner 1262. Combiner 1261 provides oneinput to multiplexer 1271 (‘MUX 1’) and combiner 1262 provides one inputto multiplexer 1272 (‘MUCX 4’). Other second stage combiners (not shown)provide inputs to multiplexers 1273 and 1274, respectively (‘MUX 2’ and‘MUX3’). The cascade of, for example, combiners 1265, 1266, and 1261 isreferred to as two-stage combining.

[0143] Four illustrative switched paths through optical switch 1251 areshown for expository purposes, namely, the paths from (a) input port‘0000’ to output port ‘0000’, (b) input port ‘0011’ to output port‘1100’, (c) input port ‘1100’ to output port ‘0011’, and (d) input port‘1111’ to output port ‘1111’ The first path delivers optical signal A1to multiplexer 1271, the second path delivers A1 to multiplexer 1272,the third path delivers the optical signal on path 1212 to multiplexer1271, and the fourth path delivers the optical signal on path 1212 tomultiplexer 1272. It is clear that A1 can appear at the output of any ofthe multiplexers, some of the multiplexers, or all of the multiplexersdepending upon the number of sub-headers conveyed by optical signal A1.For expository purposes, ‘HEADER A1’ is presumed to be composed of fourheaders ‘HA11’, . . . , ‘HAI4’ referred to by reference numerals 1221, .. . , 1222, respectively.

[0144] Switch 852 is a 4×4 optical switch arrangement as previouslydiscussed. In the block diagram of FIG. 12, B2 is only multicast tomultiplexers 1271 and 1272, but not ‘MUX 2’ or ‘MUX 3’. (If it isdesired to multicast B2 to ‘MUX 2’ and ‘MUX 3’, then it would benecessary to interpose two-stage splitting and two-stage combining, asdiscussed with respect to switch 1251, as well replacing 4×4 opticalswitch 852 with an 16×16 optical switch.)

[0145] Table 3 below reflects a portion of the known information toappend appropriate header information given the structure of opticalswitches 1251 and 852 of FIG. 12: TABLE 3 LOCAL Switch ADDRESS Deliveroptical signal A1 to multiplexer 1271 1251 00000000 Deliver opticalsignal A1 to multiplexer 1273 1251 00010100 Deliver optical signal A1 tomultiplexer 1274 1251 00101000 Deliver optical signal A1 to multiplexer1272 1251 00111100 Deliver optical signal A2 to multiplexer 1271 125101000001 Deliver optical signal A2 to multiplexer 1273 1251 01010101Deliver optical signal A2 to multiplexer 1274 1251 01101001 Deliveroptical signal A2 to multiplexer 1272 1251 01111101 — Deliver opticalsignal B1 to multiplexer 1271  852   0000 Deliver optical signal B1 tomultiplexer 1272  852   0110 Deliver optical signal B2 to multiplexer1271  852   1001 Deliver optical signal B2 to multiplexer 1272  852  1111

[0146] To understand how a system composed of a cascade of elements thatperform splitting-switching-combining functions, consider the elementsencompassed by dashed box 1301 in FIG. 13—which is overlaid oncomponents of FIG. 12. System 1301 may be considered a basic buildingblock upon which to build other more complex optical switching systemsto thereby provide an optical switching system of appropriate size forany given network node. System 1301, now referred to as a 16×16 opticalsystem, includes: two-stage splitting (splitters 1241 feeding splitters1245 and 1246, and so forth); 16×16 optical switch 1251; and two-stagecombining (combiners 1265 and 1266 feeding combiner 1261, and so forth).

[0147] The use of system 1301 as a building block is demonstrated withreference to FIG. 14. In FIG. 14, four such systems are arranged tomulticast optical signals appearing in composite optical signals A, B,C, and D. In particular, FIG. 14, for the sake of clarity andsimplicity, depicts that four optical signals A1, B2, C3, and D4 aremulticast over output paths emanating from multiplexers 1411, 1412,1413, and 1414, respectively. Each composite signal (e.g., A) iscomposed of four optical signals (e.g., A1, . . . , A4), and each set offour optical signals serves as input to a corresponding one of the foursystems labeled 1301. Also, the four optical signals in each set provideseparate headers to header detector 820. In FIG. 14, only the opticalpaths A1, B2, C3, and D4 being inputted to header detector 820 areexplicitly shown—the remaining optical paths also serve as inputs todetector 820. Since each optical path A1, B2, C3, and D4 is to bemulticast to four output paths, each header must convey four sub-headerswith table look-up information.

[0148] It is readily contemplated by one with ordinary skill in the art,given the teachings with respect to FIGS. 7-14, that an optical systemsuch as 1301 can be a building block for more complex optical switchingarrangements composing each network node. Thus, FIG. 14 is merelyillustrative of one of the possible embodiments of such a switchingarrangement.

[0149] 1.5) Layout of Header(s)

[0150] The optical header that carries the label-switching data may beimplemented in the sub-carrier domain, which is now described from anoverview perspective. FIGS. 15A and 15B depict optical packettransmission, and contrast the traditional propagation approach (FIG.15A) with a WDM sub-carrier optical-label approach using a singlesub-carrier for multicasting (FIG. 15B). In the traditional approach,the network data (1501) is contiguous in time with the IP header (1502)and IP data payload (1503) as a single packet. From the frequency domainviewpoint, the upper half of FIG. 15A shows spectrum 1504 of thepacket—as is discerned, the network data is embedded within the overallspectrum. With a “single sub-carrier optical labeling” approach, asdepicted in FIB. 15B, network data 1501 along with, for example,optical-label switching information L1, . . . , LN (reference numerals1512, . . . , 1513, respectively) for looking up local routes through anetwork element via its look-up table, are propagated contiguously intime. But, in terms of the frequency domain, IP header 1502 and IP data1503 occupy one band of the spectrum (1504), whereas network data 1501and labels 1512, . . . , 1513, which form the header (H), are displacedin frequency, as shown by band 1505 in the upper half of FIG. 15B. TheIP information and the header information are conveyed by the sameoptical wavelength, shown as λ in FIGS. 15A and 15B.

[0151] As an alternative, the WDM optical-label switching approach usinga multiplicity of sub-carriers may also be used for multicasting. Thisalternative is shown pictorially in FIGS. 15C, 15D, and 15E, as nowdescribed. FIG. 15C is a repeat of FIG. 15A for comparison purposes.FIG. 15D is a specific example of the generalized depiction in FIG. 15B;in particular, three optical labels 1512, 1514, and 1513 (L1, L2, L3,respectively) are shown as composing header H. Again, as seen in theupper half of FIG. 15D, there is main spectrum 1504 conveying the datapayload, and spectrum 1505 conveying the header. Now, spectrum 1505 isshown as being centered at a sub-carrier frequency of ƒ₁. Themultiplicity of sub-carriers approach is depicted in FIG. 15E, whereineach optical label L1, L2, or L3 is now carried by an associated uniquesub-carrier, illustrated by frequencies ƒ₁, ƒ₂, and ƒ₃, respectively, infrequency bands 1525, 1526, and 1527 (H1, H2, and H3) of the frequencydomain. Also shown are network data 1521, 1522, and 1523 associated witheach label L1, L2, and L3, respectively. Each network data may be asubset of the original data 1511, or may convey additional data asrequired. For instance, network data 1521 may convey network data 1511as well as a field indicating the number of additional labels (in thisexample, two labels L2 and L3 in addition to L1), to be processed ineach network element to effect multicasting. (It is worthwhile to notethat H1, H2, or H3 are generic representations for HA11, HA12, HB21, andso forth of FIGS. 8-13.)

[0152] High-level flowchart 1600 of FIG. 16 summarizes the generalprinciples of multicasting in a WDM network. Initially, processing block1605 operates to produce electronic packets in an IP router. Next, viaprocessing block 1610, the labels for optical switching are generated tomulticast an associated payload through each of the nodes encountered asthe data payload traverses the optical network. Then, a per processingblock 1615, the header is formed from the labels. Processing by block1620 is then invoked to embed the header, either in its singlesub-carrier or multiple sub-carriers manifestation, in the samewavelength as the data payload at an input node to the network. Theoptical signal formed is such that the header or headers, as the casemay be, occupy a frequency band above the band of the data payload.Processing block 1625 indicates that the optical signal is propagatedover the WDM network from the given input node. Next, at each nodeencountered by the optical signal, the header or headers conveyed by theoptical signal are read and processed to multicast the signal asrequired in processing block 1630. These headers are then processed, viablock processing block 1635, to supply an appropriate header or headersto data payload for multicasting as the multicast optical signalcontinues to traverse the network. Finally, as invoked by processingblock 1640, the data payload is detected at each destination node toproduce a data payload representative of the input packets.

[0153] 1.6) Description of Plug-and-Play Modules of Chang

[0154] The present invention is based upon the modification to the twotypes of Plug-and-Play modules to be attached to the WDM networkelements as taught by Chang. Introduction of these Plug-and-Play modulesadded by Chang brought optical label switching capability to the thenexisting circuit-switched network elements.

[0155] In FIG. 3, both header encoder 321 and header remover 322 wereshown in high-level block diagram form; FIGS. 17 and 18 show,respectively, a more detailed schematic for both encoder 321 and remover322.

[0156] In FIG. 17 (FIG. 7 of Chang), IP packets or datagrams areprocessed in microprocessor 1710 which generates each optical signalingheader 210 for label switching. Optical signaling header 210 and theoriginal IP packet 211 are emitted from microprocessor 1710 at baseband.Signaling header 210 is mixed in RF mixer 1720 utilizing localoscillator 1730. Both the mixed header from mixer 1720 and the originalpacket 211 are combined in combiner 1740 and, in turn, the output ofcombiner 1740 is encoded to an optical wavelength channel via opticalmodulator 1760 having laser 1750 as a source of modulation.

[0157] In FIG. 18 (FIG. 8 of Chang), the optical channel dropping out ofa network element is detected by photodetector 1810 and is electricallyamplified by amplifier 1820. Normally, both photodetector 1810 and theamplifier 1820 have a frequency response covering only the data payloadbut not the optical signaling header RF carrier frequency provided bylocal oscillator 1730. Low-pass-filter 1830 further filters out anyresidual RF carriers. The output of filter 1830 is essentially theoriginal IP packet sent out by the originating IP router from theoriginating network element which has been transported through thenetwork and is received by another IP router at another network element.

[0158] Block diagram 1900 of FIG. 19 (FIG. 9 of Chang) depicts theelements for the detection process effected by Plug-and-Play module 410of FIG. 4 to convert optical signal 1901, which carries bothlabel-switching signaling header 210 and the data payload 211, intobaseband electrical signaling header 1902. Initially, optical signal1901 is detected by photodetector 1910; the output of photodetector 1910is amplified by amplifier 1920 and filtered by high-pass filter 1930 toretain only the high frequency components which carry optical signalingheader 210. RF splitter 1940 provides a signal to local oscillator 1950,which includes feedback locking. The signal from local oscillator 1950and the signal from splitter 1940 are mixed in mixer 1960, that is, thehigh frequency carrier is subtracted from the output of filter 1920 toleave only the information on label-switching signaling header 210. Inthis process, local oscillator 1950 with feedback locking is utilized toproduce the local oscillation with the exact frequency, phase, andamplitude, so that the high frequency component is nulled during themixing of this local oscillator signal and the label-switching signalingheader with a high-frequency carrier. Low-pass filter 1970, which iscoupled to the output of mixer 1960, delivers baseband signaling header210 as electrical output signal 1902.

[0159] The circuit diagram of FIG. 20 (FIG. 10 of Chang) shows anexample of a more detailed embodiment of FIG. 4. In FIG. 20, each headerdetector 2010, 2020, . . . , 2030, . . . , or 2040 processes informationfrom each wavelength composing the optical inputs arriving on paths2001, 2002, 2003, and 2004 as processed by demultiplexers 2005, 2006,2007, and 2008, respectively; each demultiplexer is exemplified by thecircuit 1900 of FIG. 19. The processed information is grouped for eachwavelength. Thus, for example, fast memory 2021 receives as inputs, fora given wavelength, the signals appearing on lead 2011 from headerdetector 2010, . . . , and lead 2034 from header detector 2030. Eachfast memory 2021-2024, such as a content-addressable memory, serves asan input to a corresponding label switch controller 2031-2034. Eachlabel switch controller 2031-2034 also receives circuit-switched controlsignals from network element switch controller 420 of FIG. 4. Each labelswitch controller intelligently chooses between the circuit switchedcontrol as provided by controller 420 and the label switched informationsupplied by its corresponding fast memory to provide appropriate controlsignals the switching device 430 of FIG. 4.

[0160] Flow diagram 2100 of FIG. 21 (FIG. 11 of Chang) is representativeof the processing effected by each label-switch controller 2031-2034.Using label-switch controller 2031 as exemplary, inputs fromcircuit-switched controller 420 and inputs from fast memory 2021 aremonitored, as carried out by processing block 2110. If no inputs arereceived from fast memory 2021, then incoming packets arecircuit-switched via circuit-switched controller 420. Decision block2120 is used to determine if there are any inputs from fast memory 2021.If there are inputs, then processing block 2130 is invoked so thatlabel-switch controller 2031 can determine from the fast memory inputsthe required state of switching device 430. Then processing block 2160is invoked to transmit control signals from label-switch controller 2031to control switching device 430. If there are no fast memory inputs,then the decision block 2140 is invoked to determine if there are anyinputs from circuit-switched controller 2140. If there are inputs fromcircuit-switched controller 420, then processing by block 2150 iscarried out so that label-switch controller 2031 determines from theinputs of circuit-switched controller 420 the required state ofswitching device 430. Processing block 2160 is again invoked by theresults of processing block 2150. If there are no present inputs fromcircuit-switched controller 2140 or upon completion of procession block2160, control is returned to processing block 2110.

[0161] By way of reiteration, optical label-switching flexibly handlesall types of traffic: high volume burst, low volume burst, and circuitswitched traffic. This occurs by interworking of two-layer protocols ofthe label-switched network control. Thus, the distributed switchingcontrol rapidly senses signaling headers and routes packets toappropriate destinations. When a long stream of packets reach thenetwork element with the same destination, the distributed switchingcontrol establishes a flow switching connection and the entire stream ofthe packets are forwarded through the newly established connections.

[0162] A label switching method scales graciously with the number ofwavelengths and the number of nodes. This results from the fact that thedistributed nodes process multi-wavelength signaling information inparallel and that these nodes incorporate predicted switching delay inthe form of fiber delay line. Moreover, the label switching utilizespath deflection and wavelength conversion for contention resolution.

[0163] 1.7) Optical Header Processing

[0164] The foregoing description focused on optical header processingfor multicasting at a level commensurate with the description of theoverall NGI system configured with the overlaid Plug-and-Play modules.Discussion of header for multicast processing at a more detailed levelis now appropriate so as to exemplify how the combination ofmulticasting and low-latency can be achieved at the circuit-detaillevel.

[0165] To this end, the arrangement of FIG. 22, which is a more detailedblock diagram encompassed by the earlier descriptions of FIGS. 19 and 20especially, is considered. As seen in FIG. 22, optical signal 2001serves as an input to demux 2005, both of which are re-drawn from FIG.20. Furthermore, a detailed illustrative embodiment of header detector2010 of FIG. 20 is now shown in FIG. 22. In particular, header detector2010 includes in this embodiment: (a) dispersion compensator 2205 forcorrecting dispersion in the optical signal at optical wavelength λ₁emanating from demux 2005; (b) optical-electrical converter 2210 (e.g.,a photodetector) for producing electrical output signal 2211 from theoptical signal departing compensator 2205; (c) a bank of localoscillators having frequencies ƒ₁, ƒ₂, . . . ƒ_(N) feeding multipliers2221, 2231, . . . , 2241, respectively, for frequency-shifting thefrequency components of electrical signal 2211 to intermediatefrequencies (IFs); (d) a bank of IF band-pass-filters (IF-BPF) 2222,2232, . . . , 2242 responsive to multipliers 2221, 2231, . . . , 2241,respectively, to filter the frequency domain energy in header signals2213, . . . , 2215 shown at the top left-hand of FIG. 22; (e) a cascadeof envelope detector/decision circuit pairs 2223/2224, 2233/2234, . . ., 2243/2244 wherein the presence of frequency domain energy in any ofthe frequency bands centered at ƒ₁, f₂ . . . ƒ_(N) is denoted as a logic‘1’ at the output of the decision circuits 2224, 2234, . . . , 2244,whereas the absence of frequency domain energy at ƒ₁, ƒ₂, . . . , ƒ_(N)is denoted as a logic ‘0’; (f) logic circuit 2250 which provides aswitch selection signal on selection lead 2260, the function of whichbeing discussed in more detail in the operational description below; (g)delay circuits 2225, 2235, . . . , 2245 coupled to the BPF filters 2222,. . . , 2242; (h) switches 2261, 2262, . . . 2263, coupled to delaycircuits 2225, . . . , 2245 as inputs, and being controlled by thesignal on lead 2260; (g) input lead 2265, connected to switches 2261, .. . , 2263, which serves as an input to demodulator 2291; (h) detector2292 responsive to demodulator 2291; and (i) read circuit 2293 whichoutputs signal 2011 of FIG. 20.

[0166] The operation of header detector 2010 of FIG. 22 is as follows.It is assumed that the second type of ‘Plug-and-Play’ module of FIG. 4injects a 2.5 Gbps IP data packet (e.g., with QPSK/QAM modulation) whichis sub-carrier multiplexed with a 155 Mbps header packet (e.g., with QAMmodulation) at a center frequency ƒ₁; as before, the header precedes thedata payload in time and both are carried by the optical wavelength λ₁.In each network node which receives the combined header and payload atwavelength λ₁, the sub-carrier header at ƒ₁ is detected by envelopedetector 2223. Because there is energy present in the frequency bandcentered at ƒ₁ due to the existence of the header signal, decisioncircuit 2224 detects a logic ‘1’, whereas all other decision circuitsdetect a logic ‘0’. This combination of logic signals (‘100 . . . 0’) inparallel at the input to logic circuit 2250 generates the selectionsignal 2260 which effects the closure of only switch 2261. (It isimportant to emphasize that the input logic signals are generatedconcurrently and in parallel, rather than in series, therebysignificantly speeding up the header detection process.) The actualheader signal provided at the output of IF-BPF 2222 serves, after thedelay imposed by delay circuit 2225, as the input to demodulator 2291via lead 2265. The delay of circuit 2225 is not critical, other than thedelay is greater than the time required to derive the logic signal viaenvelope detector 2223 and decision circuit 2224, plus the time requiredto compute the control signal on selection signal lead 2260 in logiccircuit 2250 and to close switch 2261. (The delay can be implementeddigitally, e.g., by replacing each analog delay in FIG. 22 by a cascadeof a demodulator and a digital delay.) Therefore, the header signal atƒ₁ is the only header signal that will be demodulated by demodulator2291 (e.g., a QAM demodulator), and the demodulated baseband data burstis then detected by detector 2292 (e.g., a 155 Mbps burst-modereceiver), and read by circuit 2293 (e.g., a microprocessor).

[0167] This foregoing operational description has focused only on thedetection of the optical header to control the routing path throughswitching device 430 of FIG. 4. As alluded to in the Background Section,header replacement is now considered important to present-day NGItechnology so as to accomplish high-throughput operation in a packetswitched network in which data paths change due to, for example, linkoutages and variable traffic patterns. Moreover, header replacement isuseful to maintain protocol compatibility. The components of FIG. 22which have heretofore not been described play a central role in headerreplacement. Actually, the notion of header replacement has a broaderconnotation in that the header may be composed of various fields, suchas a “label” field and a “time-to-leave” field. The description to thispoint has used the header and label interchangeably; however, it is nowclear that the header may actually have a plurality of fields, and assuch any or all may be replaced at any node.

[0168] Now continuing with the description of FIG. 22, it is shown thatlogic circuit 2250 also provides a second selection signal on selectionlead 2270; this lead control switches 2271, 2272, . . . , 2273 which areall connected to lead 2295. Interposed between lead 2295 and headeroutput lead 2011 is write circuit 2294 in cascade with modulator 2296.Write circuit 2294 is responsible for providing a new header signal. Theheader signal that arrives at the input to demux 2005 is referred to asthe active header signal—in the first node to process the header signal,the active header signal and the original header signal coalesce. Thenew header signal, rather than actually overwriting the active headersignal, is placed in a frequency band above the frequency band of theactive header signal, that is, the next highest available centerfrequency from the set ƒ₁, ƒ₂. . . , ƒ_(N) is utilized to propagate thenew header signal. To select the next highest available centerfrequency, logic circuit 2250 is arranged so that if decision circuits2224, 2234, . . . , 2244 yield an active center frequency ƒ_(i), thenselection signal 2270 will close only the switch from the set 2271,2272, . . . , 2273 which connects lead 2295 to center frequency ƒ_(i+1).That is, lead 2295 will be connected to the multiplier from the set2281, 2282, . . . , 2283 which corresponds to frequency ƒ_(i+1). Theoutputs of multipliers 2281, 2282, . . . , 2283 are connected to lead2284, which serves as a second input to optical switch/add-dropmultiplexer 2207; the other input is provided by the header signal onlead 2011. Circuit 2207 now has a dual functionality, namely, itoperates as switching device 430 of FIG. 4, but is also arranged toconvert an input electrical signal, such as on lead 2284, to an opticalsignal for propagation by the same optical wavelength present at theinput to circuit 2207 (in this case, wavelength λ₁). Accordingly, thenew header signal on lead 2284 is frequency shifted above the datapayload as well as all other existing headers arriving on lead 2208;this is shown in frequency domain visualization in the top right-handcorner of FIG. 22, which is counterpart of the visualization in the topleft-hand corner. So that the new header signal is placed ahead of thedata payload in time, delay is introduced by fiber loop 2206.

[0169] The operation of the arrangement of FIG. 22 for headerreplacement is as follows. Again, the same example is used so that anoptical header plus a data payload is incoming to the network nodeimmediately following the node that injected the packet. It is desiredto write a new header signal, and in the embodiment of FIG. 22, theoutput of read circuit 2293 serves as an input to write circuit 2294; inthis manner, the active header signal may serve as an aid in computingthe new header signal. The new header signal is conveyed by centerfrequency ƒ₂ since the incoming active header signal is centered aboutƒ₁. In effect, the new header signal is written on the original lightwhich contains both the data packet and the old sub-carrier header oractive header signal at ƒ₁. Therefore, the modulated light which leavesthe given node contains the data packet and two sub-carrier headersignals. (Two illustrative writing techniques, both of which use ahigh-speed (˜10 GHz) LiNbO₃-based modulator/switch, will be explainedlater.) The carrier frequency ƒ₂ is higher than ƒ₁ by about 200 MHz forthe 155 Mbps data, but the frequency difference between ƒ₁ and ƒ₂ can besmaller if a more spectral efficient modulation method such as M-QAM isadopted. Note that this node has the intelligence via logic circuit 2250to know that the active header signal uses sub-carrier ƒ₁ and the newheader signal is written onto sub-carrier ƒ₂.

[0170] In a similar manner, the third network node along the route willread the active header signal on sub-carrier ƒ₂ and write new headerinformation onto sub-carrier ƒ₃, and the process continues until themodulation bandwidth of optical switch/ADM 2207 is exhausted. Forexample, a typical 10 GHz external LiNbO₃-based modulator/switch canwrite about 40 ((10−2)10.2) new sub-carrier headers signals, where ithas been assumed that the 2.5 Gbps data occupies a bandwidth of 2 Ghz.

[0171]FIG. 22 actually illustrates the implementation details of thefourth network node along the route over which a packet travels. Thethree sub-carrier headers on λ₁ are simultaneously down-converted to IFband, and due to their existence, decision circuits 2224, 2234, . . . ,2244 generate a logic ‘1’ signal to logic circuit 2250 in the pattern‘111000 . . . 000’. Note that if there are 40 down-converters in thisexample, 37 decision circuits will generate logic ‘0’s because there areno sub-carriers on ƒ₄, ƒ₅, . . . ƒ₄₀. Logic circuit 2250 uses the output“1110000 . . . . 0” (three ones and thirty-seven zeros) to control the40 microwave switches 2261, 2262, . . . , 2263 such that only the thirdmicrowave switch is closed and all other 39 switches are open.Therefore, the header information on ƒ₃ becomes the active header signalthat is then demodulated by demodulator 2291. Immediately after the“read” process, the new header signal is generated by write circuit 2294and then applied to modulator 2296 at IF. As depicted in FIG. 22, thenew header signal is launched to the fourth microwave switch which isturned on by selection signal 2270. The new header signal is thenup-converted by ƒ₄, and is used to modulate the delayed main-path signalon optical path 2208 (which originally contains only three sub-carrierheaders). The resultant modulated light therefore contains foursub-carrier headers as depicted.

[0172] It is noted that, in terms of presently available components, theprocessing time of the envelope detectors (2223, . . . .), the decisioncircuits (2224, . . . ), the logic circuit (2250), and the turning-on ofa particular microwave switch (2261, . . . ) should take less than 30ns. On the other hand, if it is assumed that there are 15 bits in eachpacket header signal, then the time to read 15 bits, write 15 bits, andadd 10 preamble bits can take about 260 ns for a 155 Mbps burst.Therefore, allowing for some variations, each header signal is about 300ns. This means that the length of delay line 2206 in main optical path2208 should be around 60 meters.

[0173] There exist some upper bounds on the proposed sub-carrier headerinsertion technique of FIG. 22: (a) the sub-carriers at carrierfrequencies as high as 10 GHz can become severely attenuated due tofiber dispersion after a certain transmission distance (usually tens ofkilometers). Fortunately, this problem can be solved by repeatedly usingdispersion compensation fibers (such as compensator 2205) or chirpedfiber gratings at every network node; (b) at each intermediate networknode, its modulator 2296 (e.g., a LiNbO₃-based modulator) modulates theincoming “modulated” light by a new sub-carrier header signal, and thiscan cause new intermodulation distortion products. However, the presenttechnology is such that the nonlinear distortion penalty after 40 timesof writing consecutive sub-carrier header signals is not large enough todegrade the bit-error-ratio (BER) of both the data payload and thesub-carrier header signal up to a distance of 2000 km; and (c) since themaximum number of insertable sub-carrier header signals are about 40using a 10 GHz modulator, at some point in the network the entiresub-carrier header signals will have to be erased so that a new set ofsub-carrier header signals can be written onto the received light allover again. Being conservative, it is determined that the maximumtransmission distance using the arrangement of FIG. 22 is about 2000 km.Therefore, it is feasible that several “reset” network nodes areimplemented, configured as shown in FIG. 23 (to be discussed shortly),which are sparsely located across the nation, to guarantee that the 40times-writing limit is never exceeded. It is noted, however, that notevery node will insert a new header signal (recall the new header signalis typically inserted due to slowly varying network outages or forprotocol compatibility). If this is indeed the case, then it isanticipated that 40 header signal insertions are more than enough tocover any cross-nation transport of an optical packet.

[0174] However, to be sure that a new header signal can be inserted whenneeded, preferably some or even all of the network nodes are arrangedwith the circuitry 2300 of FIG. 23. The primary difference between FIGS.22 and 23 is in the upper path of FIG. 22 wherein the main-path opticalsignal appearing at the output of compensator 2205 is converted back toelectrical domain via opto-electrical converter 2210, with all of itsold sub-carrier header signals being erased by using low-pass filter(LPF) 2311. A new, single sub-carrier header signal centered atfrequency ƒ₁ is added to the regenerated data payload in electricaladder 2313; the data payload is regenerated in the conventionalelectrical manner by timing recovery-and-decision circuitry 2312.Together the data payload and new header signal modulateelectrical-optical transmitter 2314 having the same wavelength λ₁.Therefore, from this reset node on, another 40 sub-carrier headersignals can be written before there is the (unlikely) need to resetagain.

[0175] 1.7.1) Another Illustrative Embodiment of a Header InsertionTechnique

[0176] The circuit arrangements of FIGS. 22 and 23 were realized withoutthe need for local light injection. In order to increase thetransmission distance beyond the anticipated 2000 km limit, another nodeheader processing arrangement is required, as now depicted in FIG. 24;this arrangement deploys the injection of local light at wavelength Al.The main difference between FIG. 22 and FIG. 24 is shown the processingpath composed of the following components: (a) opto-electrical converter2410; (b) decision circuit 2440 responsive to converter 2410; (c) theseries arrangement of delay line 2411 and optical gate 2420, with delayline 2411 being responsive to the output of compensator 2205; (d)coupler 2430 responsive to gate 2420; (e) light feedback path 2431 forfeeding output light from coupler 2430 to its input, path 2431 beingcomposed of erbium-doped fiber amplifier (EDFA) 2432 and optical switch2433; (f) light modulator 2450 responsive to the incoming signalappearing on path 2284, as before, and the incoming signal appearing onlead 2451 from coupler 2430; and (g) optical adder 2460 responsive toboth light modulator 2450 and optical switch/ADM 2207. An augmentedoptical packet 2470, with the form shown in the lower left corner ofFIG. 24, now arrives at the network node of FIG. 24 via optical path2001. Preamble 2471 in optical packet header 2470, afteroptical-to-electrical conversion in opto-electrical converter 2410,directs detection circuit 2440 to turn on optical gate 2420 and letshort CW light burst 2472 (about 30 ns in duration) at λ₁ pass throughto coupler 2430. CW light burst 2472 then loops several times viafeedback path 2431 to lengthen the CW light duration to about 300 ns;this extended duration CW burst serves as an input to light modulator2450 via output path 2451 from coupler 2430. The new sub-carrier headersignal appearing on lead 2284 then modulates this locally regenerated CWlight burst on lead 2452 via light modulator 2450 (e.g., via a LiNbO₃modulator). The modulated light which appears on output lead 2452 oflight modulator 2450, containing only the new, active sub-carrier headersignal, is then combined in optical adder 2460 along with the main-pathlight which contains the data payload and the old sub-carrier headersignals as emitted by switch 2207. The time of occurrence of the newsub-carrier header signal arrives essentially concurrently with originaloptical packet 2470 at optical adder 2460. (In an intermediate networknode, it is important for the node to re-modulate the new header ontothe original wavelength in the same time frame as the payload data.)Thus the light pulse conveying the new active header signal occupies thesame time interval as the incoming header signals 2473, with thedifference being that the old header signals and the new active headersignal are separated in the frequency domain by their correspondingsub-carrier frequencies. That is, each time a new header signal isadded, the light conveying the new header signal at the given wavelengthλ₁ is overlaid on the incoming light signal conveying the old headersignals, but being such that the frequency domain characteristics aredetermined by the sub-carrier frequencies.

[0177] With this technique, no additional nonlinear distortions aregenerated due to the modulation of an already modulated light. As longas the optical power ratio between the main-path light from switch 2207and the locally-injected light from light modulator 2450 is optimized,and the modulation depths of the sub-carrier headers and data payloadare optimized, transmission can be beyond 2000 km is effected.

[0178] 1.7.2) An Alternative Header Replacement Technique

[0179] It is also possible to use an optical notch filter which has avery high finesse to notch out the old sub-carrier header signal. Thenetwork node configuration 2500 is shown in FIG. 25; it is readilyappreciated that node configuration 2500 is greatly simplified relativeto the implementation of FIG. 22. The sub-carrier header signal atcentered at ƒ_(N) is purposely allocated at high-frequency carrier(e.g., 9 GHz) so that the header signal conveyed ƒ_(N) will not affectthe data payload in the low frequency region. The output of compensator2205 feeds optical circulator 2510, which is coupled to fiberFabry-Perot (FFP) notch filter 2515 and attenuator 2520 in series. Thecombined effect of these components is to notch out the header signalcentered at ƒ_(N); the spectrum of the input to optical circulator 2510is shown in the top left corner, whereas the spectrum of the output ofcirculator 2510 is shown in the top center. The newly inserted headersignal is provided by the series combination: write circuit 2294;modulator 2296; up-converter 2281 being driven by sub-carrier ƒ_(N), ina much simplified manner as that of FIG. 22.

[0180] 1.7.3) Alternative Header Processing Using Single-SidebandOptical Header Techniques

[0181] Opto-electrical circuitry 2600 of FIG. 26, which is a moredetailed block diagram elucidating certain aspects of prior figures,especially FIGS. 19 and 20, is now considered. By way of a heuristicoverview, the processing carried out by the opto-electrical circuitry2600 is such that a header signal (e.g., 155 Mb/s on a microwavecarrier) is frequency-division multiplexed with a baseband data payload(e.g., 2.5 Gb/s). The header signal is processed by a single-sideband(SSB) modulator, so only the upper sideband representation of the headersignal is present in the frequency-division multiplexed signal.Moreover, the technique effected by circuitry 2600 is one of labelreplacement wherein the original header signal at the given carrierfrequency is first removed in the optical domain, and then a new headersignal is inserted at the same carrier frequency in the optical domain.A notch filter is used to remove the original header signal; the notchfilter is realized, for example, by the reflective part of a Fabry-Perotfilter.

[0182] In particular, circuitry 2600 has as its input the optical signalat optical wavelength Al on path 2001 as received and processed by demux2005, both of which are re-drawn from FIG. 10. Circuitry 2600 iscomposed of: a lower path to process optical signal 2601 emanating fromdemux 2005; and an upper path to process optical signal 1202 emanatingfrom demux 2005. The lower path derives the label, conveyed by theincoming SSB header in optical signal 2001, to control optical switch2603; switch 2603 is a multi-component element encompassing componentsalready described, including fast memory 1021 and label switchcontroller 1031 of FIG. 10 as well as switching device 430 of FIG. 4.The upper path is used to delete the old header signal, including thelabel, at the sub-carrier frequency and then insert a new header label,in a manner to be described below after the lower path is firstdescribed.

[0183] The lower path is an illustrative embodiment of header detector1010 originally shown in high-level block diagram form in FIG. 10. Inparticular, header detector 1010 includes, in cascade: (a)opto-electrical converter 2610 (e.g., a photodetector) for producingelectrical output signal 2611; (b) multiplier 2615 to convert electricalsignal 2611 to intermediate frequency signal 2617—to accomplish this,multiplier 2615 is coupled to local oscillator 2618 which provides asinusoid 2616 at a frequency to down-convert the incoming sub-carrierconveying the header label, designated for discussion purposes as ƒ_(c),to an intermediate frequency ƒ_(I); (c) intermediate frequency bandpassfiler 2620 having signal 2617 as its input; (e) demodulator 2625 toconvert the intermediate frequency to baseband; (e) detector 2630responsive to demodulator 2625; and (f) read circuit 2635 which outputssignal on lead 1011 of FIG. 10. Elements 2611, 2615, 2616, 2617, 2620,2625, and 2630 can all be replaced by a simple envelope detector if thesub-carrier header was transmitted using an incoherent modulator such asASK (amplitude-shift keying). It is not always required to use acoherent demodulator as shown in FIG. 26. (In fact, FIG. 27 will depictthe case for an incoherent modulation).

[0184] The operation of header detector 2010 of FIG. 26 is as follows.It is assumed that the second type of ‘Plug-and-Play’ module of FIG. 4injects a 2.5 Gbps IP data packet (e.g., with QPSK/QAM modulation) whichis sub-carrier multiplexed with a 155 Mbps single-sideband header packet(e.g., with SSB modulation) at the modulation frequency ƒ_(c); asbefore, the header precedes the data payload in time and both arecarried by the optical wavelength λ₁. In each network node whichreceives the combined header and payload at wavelength λ₁, thesub-carrier header at ƒ_(c) is multiplied by multiplier 2615, isband-pass filtered by intermediate filter 2620, and is demodulated tobaseband by demodulator 2625. Then, the demodulated baseband data burstis detected by detector 2630 (e.g., a 155 Mbps burst-mode receiver), andread by circuit 2693 (e.g., a microprocessor).

[0185] This foregoing operational description has focused only on thedetection of the optical header to control the routing path throughswitch 2603. As alluded to in the Background Section, header replacementis now considered important to present-day NGI technology so as toaccomplish high-throughput operation in a packet switched network inwhich data paths change due to, for example, link outages and variabletraffic patterns. Moreover, header replacement is useful to maintainprotocol compatibility. The upper path components of FIG. 26 that haveheretofore not been described play a central role in header replacement.Actually, the notion of header replacement has a broader connotation inthat the header may be composed of various fields, such as a “label”field and a “time-to-leave” field. The description to this point hasused the header and label interchangeably; however, it is now clear thatthe header may actually have a plurality of fields, and as such any orall may be replaced at any node.

[0186] Now continuing with the description of FIG. 26, the upperprocessing path which processes the optical signal on path 2602includes: (a) circulator 2640; (b) Fabry-Perot (FFP) filter 2645,coupled to circulator 2640 via path 2641, with filter 2645 beingarranged so that one notch in its free spectral range (FSR) falls atƒ_(c); and (c) attenuator 2650 coupled to the reflective port (R) of FFP2645. An exemplary FFP 2645 is available from The Micron Optics, Inc. asmodel No. FFP-TF (“Fiber Fabry-Perot Tunable Filter”). The combinationof these latter three elements, shown by reference numeral 2651,produces a notch filter centered at ƒ_(c) which removes the SSB headersignal propagating with ƒ_(c) as its center frequency, as shownpictorially by the spectra in the upper portion of FIG. 26. Asillustrated, spectrum 2642 of signal 2602 includes both a baseband dataspectrum and the header signal spectrum centered at ƒ_(c). Afterprocessing by notch filter 2651, spectrum 2643 obtains wherein only thebaseband data spectrum remains.

[0187] The output of notch filer 2651, appearing on path 2644 ofcirculator 2640, serves as one input to Mach-Zender modulator (MZM)2670. Two other inputs to MZM 2670 are provided, namely, via path 2671emanating from multiplier 2690 and via path 2672 emanating from phaseshift device 2695. As discussed in the next paragraph, the signalappearing on lead 2671 is the new header signal which is double-sidebandin nature. The signal on path 2672 is phase-shifted by π/’relative tothe signal on path 2671. MZM 2670 produces at its output theupper-sideband version of the signal appearing on path 2671, that is,the new header signal. The single-sideband processing effected by MZM2670 is described in detail in the paper entitled “OvercomingChromatic-Dispersion Effects in Fiber-Wireless Systems IncorporatingExternal Modulators”, authored by Graham H. Smith et al., as publishedin the IEEE Transactions on Microwave Theory and Techniques, Vol. 45,No. 8, August 1997, pages 1410-1415, which is incorporated herein byreference. Moreover, besides converting the new header signal to anoptical single-sideband signal (OSSB), MZM 2670 also adds this OSSBsignal to the incoming optical baseband signal on path 2644 to producethe desired frequency-multiplexed signal of baseband plus SSB header onoutput path 2673 from MZM 2670.

[0188] The new header signal delivered by path 2671 is derived asfollows. Write circuit 2675 is responsible for providing datarepresentative of a new header signal, such as a new label representedin binary. The header signal that arrives at the input to demux 1005 isreferred to as the active header signal. The replacement header signalis called the new header signal. Write circuit 2675 has as its input theoutput of read device 2635, so write circuit 2675 can reference or useinformation from the active header signal to derive the new headersignal, if necessary. The new header signal, as provided at the outputof write circuit 2675, is delivered to pulse generator 2680, whichperforms the operation of converting the new header signal data to, asexemplary, a 155 Mb/s signal on a microwave carrier. The signal fromgenerator 2680 is filtered by low-pass filter 2685 to remove spurioushigh-frequency energy. Then the signal from filter 2685 is delivered tomodulator 2690; modulator 2690 also has as a sinusoidal input atfrequency ƒ_(c) provided by local oscillator 2618. The output ofmodulator 2690, which appears on path 2671, is the new header signalcentered at a frequency of the local oscillator, namely ƒ_(c); also, theoutput of modulator 2690 serves as the only input to phase-shift device2695.

[0189] MZM 2670 produces a spectrum that includes both the originalbaseband data spectrum as well as the spectrum of the new header signalat ƒ_(c). This is shown in frequency domain visualization 2674 in thetop right-hand corner of FIG. 26, which is counterpart of thevisualization in the top left-hand corner.

[0190] The new optical signal on path 2673 is switched via opticalswitch 2603, as controlled by the active or original incoming headersignal, under control of the label on lead 1011

[0191] It is noted that, in terms of presently available components, theprocessing time of the header removal and insertion technique shouldtake less than 30 ns. On the other hand, if it is assumed that there are15 bits in each packet header signal, then the time to read 15 bits,write 15 bits, and add 10 preamble bits can take about 260 ns for a 155Mbps burst. Therefore, allowing for some variations, each header signalis about 300 ns. This means that it may be necessary to insert a delayline in the main optical path between circulator 2640 and MZM 2670 of300 ns, so the length of delay line would be around 60 meters. To saveprocessing time, the data rate of the sub-carrier header can beincreased to, for example, 622 Mb/s or higher, depending upon the futurenetwork environment.

[0192] 1.7.4) Another SSB Embodiment of a Header Removal and InsertionTechnique

[0193] The circuit arrangement of FIG. 26 is realized using theso-called reflective port of FFP 2645. FFP 2645 also has a transmissionport which may be utilized wherein the characteristics of the opticalsignal emanating from the transmission port are the converse of theoptical signal from the reflective port. So whereas the reflective portprovides an attenuation notch at ƒ_(c), the transmission port attenuatesfrequencies relative to so that only frequencies in the vicinity ofƒ_(c) are passed by the transmission port. An alternative to circuitry2600 of FIG. 26 is shown by circuitry 2700 of FIG. 27. The maindifference between FIG. 26 and FIG. 27 is the manner in which the lowerprocessing path now derives its input signal via path 2301 (as comparedto input signal on path 2601 of FIG. 26).

[0194] In particular, FFP 2725 now has a transmission (T) port inaddition to the reflective (R) port. The output from transmission port,on path 2701, now serves as the input to opto-electrical converter 2610.Because the signal on path 2701 conveys only frequencies centered aboutƒ_(c), that is, the baseband data information has been attenuated by FFPnotch filter 2345, and can be processed directly by detector 2630 viaLPF 2720. The remainder of circuitry 2300 is essentially the same ascircuitry 2600 of FIG. 26.

[0195] 1.8) Optical Layer Survivability and Security (OLSAS) System

[0196] Another aspect of the present invention relates to multicastingin a network that also embodies survivability and security features. Thetechniques in accordance with the illustrative embodiments set forth indetail below provide various levels of protection against all three ofthe optical “attack” schemes described in the Background Section, aswell as against other attack scenarios. By taking advantage of theexistence of (a) multicasting, (b) multiple optical wavelengths and (c)diverse network paths, it is possible to multicast information in amanner that both increases network survivability and bolstersinformation integrity while mitigating the effects of eavesdropping,misdirection, and denial of service attacks. For instance, distributinginformation from a particular session across a (randomly selected) setof wavelengths (i.e., a subset of all possible wavelengths available ona link or in the network) can defend against non-destructive fibertapping by an adversary or signal misdirection due to enemy takeover ofa network node or a control channel. Furthermore, multiple paths allowfor greater tolerance against denial of service attacks, such asjamming.

[0197] Also, it is important to note that the OLSAS techniques arecomplementary to existing or future security and survivabilitymechanisms within the electronic domain. These OLSAS techniques are notintended as a substitute for the vast array of security and encryptionmechanisms currently available. Rather, they seek to enhance theelectronic security mechanisms by offering an extra level of securitywithin the optical (physical) layer using the strength of opticalswitching and multiplexing techniques.

[0198] In particular, optical-label swapping is utilized in the IProuters attached to a transmit module of the OLSAS system so as toperform packet forwarding in this multiple-path approach withmulticasting. A pictorial view of this two-tier security is shown inFIG. 28 wherein system 2800 in high-level block diagram form includes:(a) optical network backbone “cloud” 2810 having WDM nodes 2811, . . . ,2814 coupled by optical paths 2815, . . . , 2818, as depicted; (b) IProuters 2801, 2802, and 2803 served by network backbone 2810; (c)end-to-end electronic security devices 2821, 2822, and 2823, eachcoupled to a respective IP router at its output; and (d) optical linksecurity devices 2831, 2832 and 2833, each respectively interposedbetween a corresponding electronic security device and network backbone2810. The view of FIG. 28 clearly illustrates the complementary natureof the electronic and optical security devices.

[0199] The OLSAS system has been devised to carry out information flowprotection based on network and security features in the multicastoptical header, which is carried in-band within an individual wavelengthand modulated out-of-band in the frequency domain. IP packets containedin each information flow are transported over at least two copies ofseveral randomly selected wavelength channels via choices of multipledisjoint paths. Thus, “flows” or “streams” of data can be survivablebased on these OLSAS techniques.

[0200]FIG. 29 below illustrates one embodiment of the OLSAS technique,which is first described without multicasting so as to establish andunderstand the point of departure according to this aspect of thepresent invention; the modifications to effect multicasting are thenoverlaid on the description without multicasting. With reference to FIG.29, IP packets from source IP Network #1 2905 enter WDM backbone network2910 via IP router 2901 and are destined for IP Network #2 2906 via IProuter 2902. WDM network 2910 is composed of WDM nodes 2911, . . . ,2915 coupled by the links/edges as shown, namely, nodes 2911 and 2912are coupled by link 2921, node 2912 and node 2915 are coupled by link2922, and so forth. The packets emitted by router 2901 are processed inthe Transmit Optical Network Module (ONM) 2903 interposed between router2901 and network 2910; in ONM 2903 the electronic packets are convertedto equivalent optical IP packets with an associated optical header. Inaddition, the ONM 2903 applies the OLSAS technique (using, for example,a secure pseudo-random number generator (SPRNG) as discussed in moredetail later) to choose multiple paths through the WDM network, each ofwhich carries a cryptographic share of the packets in a particular IPsession. In the example of FIG. 29, there are two disjoint paths, Path 1(composed of, in series, node 2911, link 2921, node 2912, link 2922, andnode 2915), and Path 2 (composed of, in series, node 2911, link 2925,node 2914, link 2926, and node 2915). For each of Path 1 and Path 2, ONM2903 assigns a (same or different) pseudo-random subset of availablewavelengths on which to transmit the “shares”, that is, a collection ofpackets, from a particular session. In FIG. 29, wavelengths λ_(i1), . .. , λ_(iN) having reference numerals 2931, . . . , 2932 define a firstsubset of wavelengths for propagation over Path 1, whereas wavelengthsλ_(j1), . . . , λ_(jN) having reference numerals 2933, . . . , 2934define a second subset of wavelengths for propagation over Path 2. Onepossible arrangement is to propagate packet 1 using λ_(i1) and packet Nusing λ_(iN) of Path 1; concurrently, packet 1 is transmitted usingλ_(j1) and packet N using λ_(jN) of Path 2. The selection of multiplepaths and wavelengths is varied at regular time intervals at a ratedepending on the desired levels of survivability and security. The IPpacket shares conveying the data payload are never examined or modified,thus preserving transparency and independence of the higher levels ofthe protocol stack.

[0201] At the far end, the IP packet shares are received by Receive ONM2904, converted back to electronic packets, and handed over to IP router2902 associated with IP Network #2.

[0202] ONMs 2903 and 2904 are synchronized and, as alluded to, use anyrobust Secure Pseudo-Random Number Generator (SPRNG) to coordinate thepseudo-random assignment of paths and wavelengths for a particular IPsession. Cryptographically SPRNGs are necessary to construct the sharesof the secrets and check the vectors described above. These generatorsproduce output bits indistinguishable from truly random sources to anyresource-bounded adversary. This implies that if one is presented withan output bit string from which any single bit is deleted, one cannotguess the missing bit with measurably better probability than 0.5. Sinceintegrity or secrecy is based upon splitting a message among thewavelengths on a fiber, it may be necessary for maximum security todisguise the contents of the remaining unused wavelengths to make themindistinguishable from the live data. This will require a rather largesupply of cryptographically strong pseudo-random bits. All of thecoordination between source ONM 2903 and destination ONM 2904 is throughthe optical headers of the packets and does not rely on the underlyingIP session, packets, applications, or particular data items.

[0203] The approach of FIG. 29 is representative of one exemplaryapproach to effect secure transmission which deploys two or moredisjoint paths to carry information between different end systems.Another variation on the general approach is to not duplicate theinformation on the number of disjointed paths, but rather only a portionof the information is sent on each path. Even if the information on onepath is tapped, and even if it is possible to calculate the subset ofwavelengths used to carry that information, it is impossible to captureall the information being sent. The advantage of this variation is thatan adversary needs to tap multiple paths and calculate the differentsubset of wavelengths in each such path in order to obtain theinformation being sent. Clearly, this variation becomes more effectivewhen the number of disjoint optical paths increase. At the receiver sidein this arrangement a number of paths are combined to obtain theoriginal information being sent.

[0204] The method of securing a message by splitting it into shares orcomponents is called “secret sharing”, that is, sharing splitsinformation into multiple parts or shares. Some subsets of the sharesare sufficient to reconstruct the secret information, but smallersubsets are insufficient. The so-called threshold schemes have thedesirable property that insufficient subsets reveal no partialinformation about what is being protected, so they are called perfect.Perfect secret sharing of messages can provide secrecy with respect topassive adversaries and survivability with respect to network failures.

[0205] Typically with secret sharing, if one of the shares is corrupted,the wrong value will be reconstructed. Therefore, verifiable secretsharing has become an important extension of secret sharing providingintegrity with respect to active adversaries capable of tampering.Verifiable secret sharing allows corrupted shares to be identified andremoved. To accomplish this, simple checksums of all the shares can bedistributed with each of the shares so any “honest majority” can alwayspinpoint the corrupted shares.

[0206] The block diagram of FIG. 30A illustrates this mechanism. In thisexample, message 3000 is split into Share 1, Share 2, . . . , Share 5(reference numerals 3001-3005, respectively) whereby any three of whichmay be used to reconstruct message 3000. Shares 1, 3, and 5 are receivedintact, which is sufficient to reconstruct message 3000. An eavesdropper(reference numeral 3010) may get shares 1 and 3, but two shares alonereveal nothing about message 3000. Share 2, impacted by active wiretap3015, produces Share 2* which is identified as an imposter and rejectedby the majority (Shares 1, 3, and 5), whereas Share 4 never arrives atall due to a cable break shown by reference numeral 3020.

[0207]FIG. 30B shows in pictorial fashion another example using threedisjoint paths, namely, paths 3021, 3022, and 3023. On each path,two-thirds of the information is being sent (two out of three packets),a first packet on a first wavelength and a second packet on a secondwavelength. If an adversary taps one path, and is able to calculate theappropriate subset of wavelengths being used, the adversary can onlyobtain two-thirds of the information being sent. At the receiver side,two paths are sufficient to obtain all the information.

[0208] 1.8.1) Illustrative Arrangements for Implementing OLSASTechniques

[0209] The OLSAS methodology with multicasting is also engendered byoptical label-switching. The general WDM network upon which the OLSAStechnique is overlaid has already been discussed with reference to FIGS.1-6. Moreover, the network aspects suitable for deploying the OLSASmethods in a multicast WDM network have been discussed with reference toFIGS. 7-27.

[0210] 1.8.2) Optical Networking Modules (ONMs) in Accordance with theOLSAS Method

[0211] Three optical networking modules are used to implement theOptical Layer Survivability And Security system. The first of the OLSASmodules is deployed at each of the multi-wavelength transport interfaces(e.g. at the multi-transport interfaces of node 121 of FIG. 1), thesecond OLSAS module (e.g., ONM 2903 of FIG. 29) is deployed at thetransmitter end of each single wavelength client interface (e.g. at thetransmitter end of each single-client interface of node 123 of FIG. 1),and the third module (e.g., ONM 2904 of FIG. 29) is deployed at thereceiver side of each single wavelength client interface (e.g., a thereceiver side of each single-client interface of node 122 of FIG. 1).

[0212] 1.8.3) Transport Interface Optical Network Module

[0213] The first of the optical networking modules as located at thetransport interfaces is, structurally, basically the same as the secondtype Plug-and-Play module discussed earlier—especially with respect toFIGS. 6 and 7. It is recalled from the discussion of FIG. 7 that thesecond type of Plug-and-Play module is responsible for the optical-labelswitching function with multicasting. When the header and the datapayload (e.g., 710 and 711 of FIG. 7) reach a transport node (e.g., node501 of FIG. 7), a small percentage (e.g., 10 percent) of the opticalsignal is tapped off (via optical line 6021) while the remaining portionof the signal is delayed in an optical delay line (e.g., line 603). Forthe part of the signal that is tapped off, the optical header isstripped from the optical signal in header detector (e.g. 730 of FIG. 7)and detected via conventional electrical circuitry composing the headerdetector. The optical header carries the optical label (e.g., 715),which in turn enables the packet to be routed appropriately through theswitch (e.g., 720).

[0214] In an optical network with survivability and security, theheader/payload combination arriving over each wavelength in a subset ofwavelengths at the second type of Plug-and-Play module may notnecessarily be independent and distinct. As discussed with respect toFIG. 29, for example, wavelengths λ_(i1) and λ_(iN) arriving on link2921 to node 2912 carry packets from a given IP session. However, thesecond type of Plug-and-Play module does not concern itself with thisrelation and therefore processes each incoming packet independently ofany other packet, that is, the operation of the Plug-and-Play module isunaffected by the relation among packets.

[0215] 1.8.4) Transmit Optical Network Module 2903

[0216] The transmitter side of the single wavelength client interfacedeploys the second type of module—Transmit Optical Network Module 2903.Module 2903, in effect, either replaces or is arranged to augment thefirst type of Pug-and-Play module 132 to effect, broadly, the followingprocedure: (a) generate and store multiple electronic copies of theinput packets in an input transport node; and (b) optically transmiteach of the multiply stored copies over a corresponding one of the linksattached to the input transport node. In an illustrative embodiment,such steps may be further characterized by the steps of (i) generatingmultiple copies (at least 2) of the data packets so as to send theinformation destined for downstream transmission via at least twolink-and-node disjoint paths—multiple copies can be achieved by using anIP packet multiplier known in the art; (ii) buffering the IP packets andusing a SPRNG subsystem to “scramble” the packets and emit the scrambledpackets from the buffer using M multiple output ports; and (iii)randomly assigned each of the output ports a wavelength again using aSPRGN subsystem. With this procedure, each path is assigned a differentsubset of M wavelengths out of the total number of existing wavelengthsin the network.

[0217] With reference to FIG. 31, there is shown illustrativearrangement 3100 which is one embodiment of ONM 2903. Packet source 3110(such as IP element 111 of FIG. 1) provides a packet stream depicted byA, B, C, . . . , L to IP packet multiplier 3120. The outputs of packetmultiplier 3120 are two identical streams denoted A, B, C, . . . , L andA′, B′, C′, . . . L′. The first stream serves as an input to packetbuffer 3130, whereas the second stream is an input to buffer 3131.Secure pseudo-random number generator 3170 provides “scrambling”information to each packet buffer to produce, in this example, fouroutput streams per packet buffer. In particular, packet buffer 3130outputs (ordered in time) a first stream B, C, G, a second stream K, D,E, a third stream F, H, J, and a fourth stream I, A, L. Similarly,packet buffer 3131 outputs four scrambled streams distinct from theoutput streams from buffer 3130. This aspect of scrambling ensures thatall the packet information will not be duplicated on an individualoptical wavelength at the output of arrangement 3100.

[0218] Next, SPRNG 3170 operates to re-arrange the packet streams sothat the streams from packet buffers 3130 and 3131 may be spread, inthis case, across two optical links. In particular, SPRNG 3170 controlselectronic cross-connect 3140 to produce four output streams, namely:B′, G′, J′; D′, E′, K′; I, A, L; and C′, F′, H′ at the Link 1 output ofcross-connect 3140. Similarly, four re-arranged streams are assembledfor transmission over Link 2 emanating from cross-connect 3140. Each setof four streams serves as input to Optical Label Switching Transmitter(OLS/TX) 3150 which optically modulates packet stream B′, G′, J′, alongwith the appropriate header, onto wavelength A1 on Link 1; similarly,stream D′, E′, K′ along with its header is optically modulated forpropagation by wavelength λ₂ on Link 1; and so forth for Link 1.Concurrently, stream B, C, G with its header is optically modulated ontowavelength λK of Link 2 by optical transmitter 3150, and similarly forthe remaining header/packet streams of Link 2. Finally, optical switch3160 serves to connect the optical streams to the corresponding links,as next described with respect to FIG. 32. OLSAS system controller 3180controls the operation of transmitter 3150 and switch 3160 ascoordinated with SPRNG device 3170.

[0219] When the optical packets reach the optical switch 3160 of FIG.31, the switching fabric is set in such a way that all packets used inone disjoint path (e.g., Link 1) leave the switch using the same outputfiber, as now described with reference to FIG. 32.

[0220]FIG. 32 depicts the manner by which optical packets for twodisjoint paths use two different output fibers to enter the WDM networkfrom client interface 3250 via IP router 3240 and Optical Network Moduletransmitter (ONM-Tx) 3230 which, with reference to FIG. 31, encompassesIP packet multiplier 3120, packet buffers 3130 and 3131, cross-connect3140, and SPRNG 3170. Optical switch 3260 is composed of a right-handpart for emitting optical signals, and a left-hand part for receivingoptical signals. The right-hand part has been depicted by optical switch3160 shown in FIG. 31 (the left-hand part is optical switch 3360discussed shortly with respect to FIG. 33). Focusing on the right-handpart used for transmitting optical signals, switch 3260 is composed ofswitching points to switch the incoming optical signals propagated byclient interface 3250 under control of signals arriving over path 3161(from controller 3180 of FIG. 31); one such switching point is shown byreference numeral 3262. Using the optical signal conveyed by wavelengthλ₄ as exemplary, switch 3260 closes switching point 3262 to couple theincoming optical signal to multiplexer 3210 which provides themultiplexed signals to optical Link 1. Similar comments applying withrespect to each incoming optical signal which may be directed to eithermultiplexer 3210 or 3211. Thus, for the case of K=8 in FIG. 31 (λ₁, λ₂,. . . λ₈), the optical signals with wavelengths λ₁, λ₂, λ₄, and λ₆ areswitched by switch 3260 to multiplexer 3210 for propagation over Link 1.Similarly, the optical signals with wavelengths λ₃, λ₅, λ₇, and λ₈ areswitched by switch 3260 to multiplexer 3211 for propagation over Link 2.

[0221] Module 2903 is essentially responsible for distributing the datapackets for one session through a number of different wavelengths anddisjoint paths. This set of wavelengths is a subset of the total numberof wavelengths available in the network. The optical header carriesencoded information that is then used at the receiver-side ONM to choosethe subset of wavelengths used for the communication between a givensource and destination, as now discussed.

[0222] 1.8.4) Receive Optical Network Module 2904

[0223] At the receiver node of the optical transport network, the thirdtype of module is deployed which is responsible for essentially thereverse functionality of the module located at the transmitter side, asshown in arrangement 3300 of FIG. 33. All the packets in a packet shareare received over optical Links 1 and 2 at optical switch 3360, and theoptical header of each packet is read. The security information includedin each header, such as an encoding/decrypting key, is then forwarded tothe OLSAS system controller 3380, which in turn passes this informationto SPRNG device 3370. This information is subsequently used to retrievethe packets correctly at the appropriate wavelengths. Moreover, eachwavelength is processed by Optical Label Switching Receiver 3350 todetect the packets. For example, receiver 3350 effectsoptical-to-electrical conversion of the packets arriving on wavelengthλ₁ and produces electronic packets J′, G′, B′. The packets are thenprocessed by cross-connect device 3340 in preparation for re-sequencingof the packets in buffer/resequencer 3330. As depicted, device 3340receives its input from SPRNG element 3370 to re-associate the packetsfrom the first stream (all of the “unprimed” packets A, B, C . . . , L)and the second stream (all the “primed” packets). Resequencer 3330converts the buffered packet shares to the single stream A, B, C, . . .H, and similarly converts “primed” packet shares to the correspondingsingle stream. Finally, IP selector 3320 is used to choose one of themultiple disjoint paths that carry the information of a singlecommunication session, and delivers this selected stream to the IPdestination depicted by element 3310.

[0224] Again with reference to FIG. 32, the manner by which opticalpackets for two disjoint paths use two different output fibers to exitthe WDM network through client interface 3250 via IP router 3240 andOptical Network Module receiver (ONM-Rx) 3231 (which, with reference toFIG. 33, encompasses cross-connect 3340, buffer and resequencer 3330, IPselector 3320, and SPRNG 3370) is now described. The left-hand part ofoptical switch 3260 has been depicted by optical switch 3360 shown inFIG. 33. Focusing on the left-hand part used for receiving opticalsignals, switch 3260 is composed of switching points to switch theincoming optical signals propagated by the WDM network under control ofsignals arriving over path 3381 (from controller 3380 of FIG. 33); onesuch switching point is shown by reference numeral 3263. Using theoptical signal conveyed by wavelength λ₁ as exemplary, switch 3260closes switching point 3263 to couple the incoming optical signal frommultiplexer 3220 to client interface 3250 and, in turn, to ONM-Rx 3231and IP router 3240. Similar comments applying with respect to eachincoming optical signal which may be directed from either multiplexer3220 or 3221. Thus, for the case of K=8 in FIG. 33 (λ₁, λ₂, . . . λ₈),the optical signals with wavelengths λ₂, λ₄, λ₅, and λ₇ are switched byswitch 3260 as received from multiplexer 3220. Similarly, the opticalsignals with wavelengths 80 ₁, λ₃, λ₆, and λ₈ are switched by switch3260 as received from multiplexer 3221.

[0225]FIG. 34 summarizes the electronic and optical level securitymethod with the help of high-level flowchart 3400. Initially, processingblock 3405 operates to produce electronic packets. Next, the electronicpackets are processed, to encapsulate the electronic packets withelectronic security via block 3410. Processing block 3415 is invoked togenerate a subset of wavelengths and links to carry the combinedheader/payload information. Then, via block 3420, the securityinformation is appended to the label in the header—the label effectslabel switching at intermediate nodes. The header/payload information ispropagated over the optical network (shown, for example, by “cloud” 2810of FIG. 28), as carried out by processing block 3425. As theheader/payload packets propagate through the network, optical labelswitching is deployed to route the optical packets, as denoted byprocessing block 3430. In turn, as evidenced by processing block 3435,the packets are received via the original subset of wavelengths andcorresponding links, and the optical security information in the headeris used to convert the packets to electronic form, and then re-assembleand re-sequence to produce the received electronic packets whichcorrespond to the input source packets.

[0226] Block 3440 depicts processing wherein one stream from theplurality of detected streams is selected from delivery to thedestination. Next, processing by block 3445 is invoked to decrypt theelectronic message. Finally, as depicted by block 3450, a reproducedversion of the original message is received at the destination.

[0227] (It is apparent that the level of security provided by this OLSAStechnique depends on the number of wavelengths chosen over which to sendthe information, the total number of wavelengths available, and thefrequency with which these (pseudo-random) subsets are changed, and alsothe number of paths over which the packets are spread (assuming that notall of the packets are sent via each disjoint path as per FIGS. 30A and30B). Obviously, using just 16 out of 128 wavelengths (commercialsystems provide 128 or more wavelengths) to carry the information yieldsan effective key size of more than 100 bits.)

[0228] 1.8.5) Layout of Header(s)

[0229] The optical header that carries additional security features andinformation ('security features' for short) may be implemented in thesub-carrier domain in much the same manner as the optical-labeltechnique described earlier with respect to FIGS. 15A-15E. FIGS. 35A and35B depict optical packet transmission with security features, andcontrast the traditional propagation approach (FIG. 35A) with a WDMsub-carrier optical-label approach for conveying security features aswell as an optical label (FIG. 35B). (Later, both security features andmultiple optical labels are discussed together in FIG. 37). In thetraditional approach, network features (NF) 3501 and security features(SF) 3502 are contiguous in time with the IP header (3503) and IP datapayload (3504) forming, typically, a single packet. From the frequencydomain viewpoint, the upper half of FIG. 35A shows spectrum 3505 of thepacket—as is discerned, the network features and security features areembedded within the overall spectrum. With the optical labelingswitching approach, as depicted in FIG. 35B, network features 3501 alongwith, for example, label L (reference numeral 3507) and securityfeatures SF (reference numeral 3512) are propagated contiguously intime. In terms of the frequency domain, IP header 3503 and IP data 3504of FIG. 35A occupy one band of the spectrum (3505), whereas networkfeatures 3501, label 3507, and security features 3512, which form theheader (H) of FIG. 35B, are displaced in frequency, as shown by band3506 in the upper half of FIG. 35B. The IP information and the headerinformation are conveyed by the same optical wavelength, shown as X inFIGS. 35A and B.

[0230] 1.8.6) Secure Optical Layer Control Module (SOLCM)

[0231] With reference to FIG. 36A, secure optical layer control module3610 creates and distributes messages to ONMs 3630 and 3635 using theSecure Optical Layer Control Protocol (SOLCP) on links 3611 and 3612;ONM 3630 couples secure data network 3615 to public optical network3625, and ONM 3635 couples secure data network 3620 to public network3625. Module 3610 has the important function of maintaining informationon the status of the network as a whole, that is, public optical network3625, and module 3610 communicates with ONMs 3630 and 3635 via a set ofSOLCP messages. Such messages may require ONM 3630 or 3635 to perform aspecific task, or the messages may be queries for alarms, alerts, linkstatus, available wavelengths, and so forth. This control operation canprocess data on link status within network 3625. For example, module3610 can use statistical information about packet loss, throughput, anddelay to develop a database of links that are the “best” links to usefor any given transmission application. Module 3610 can alsoperiodically send explicitly routed, time-stamped packets into thenetwork to generate network status data. Module 3610 can be merged orintegrated with NC&M 220 to create a “secure NC&M” module, that is, thefunctionality required of the SOLCM can be effected by the NC&M as well.In FIG. 36A, optical network 3625 is, for sake of clarity in theforegoing discussion, presumed to be a non-multicast optical network.

[0232]FIG. 36B now depicts an arrangement commensurate with FIG. 36Awherein optical network 3626 is now arranged for multicasting inaddition to survivability and security. This capability is exemplifiedby the presence of two similar secure optical network modules 3635 and3636 coupled to the right-hand side of optical multicast network 3626.The optical communications scenario depicted in FIG. 36B is one whereinsecurity and survivability is desired for more than one destinationdevice—in this case IP routers 3641, 3642, and 3643, and wherein router3643 is not served by alternative links to routers 3641 and 3642.Optical network 3610, because of its multicast capability, can deliverthe shares arriving at any WDM network encompassed by network 3610 toboth ONM 3635 and 3636. To achieve multicasting, optical network 3626 isarranged with multicasting optical switches of the type discussed withreference to FIGS. 7-14, that is, each WDM node composing opticalnetwork 3626 has an embedded switch of the requisite type exemplified bythe multicast optical switches of FIGS. 7-14.

[0233] 1.8.7) Layout of Headers for Multicasting in an OLSAS Network InFIG. 36B, WDM security and survivability information can be conveyeddownstream using either the single sub-carrier approach or amultiplicity of sub-carriers. These alternative approaches are shownpictorially in FIG. 37B and FIG. 37C, respectively, whereas FIG. 37Arepeats FIG. 35A for comparison purposes. With this single sub-carrierapproach of FIG. 37B, a label is associated with each of the securityfeatures; for example, label L1 (3701) with SF1 (3704), and so forth.The total header has the spectrum as shown by 3707 in the upper-half ofFIG. 37B. With the multiple sub-carrier approach, the unique label isattached to each of the security features, and the combination occupiesa distinct frequency band. For example, label L3 and SF3 (referencenumerals 3711 and 3712, respectively) occupy the highest frequency band(H3) in the upper-half of FIG. 37C. As thus shown in FIG. 37C, SF1, SF2,or SF3 with their corresponding label L1, L2, or L3, respectively, iseach carried by an associated unique sub-carrier in the frequencydomain, namely, in frequency bands shown by H1, H2, and H3,respectively. Also shown are network features, e.g., 3710, associatedwith each label SF1, SF2, and SF3, respectively. Each of the networkfeatures may be a subset of the original network features 3501, or mayconvey additional data as required. For instance, network features 3501may convey, additionally, a field indicating the number oflabel/security features fields that appear (in this example, threelabel/security features fields), to be processed in each network elementto effect security and survivability.

[0234] With reference to FIG. 38, there is shown a flow diagram 3800with depicts the steps to carry out multicasting to effect survivabilityand security. Initially, processing block 3805 operates to produceelectronic packets. Next, the electronic packets are processed toencapsulate the electronic packets with electronic security via block3810. Processing block 3815 is invoked to generate a subset ofwavelengths and links to carry the combined header/payload information.Then, via block 3820, security information (e.g. SF1 and SF2) isappended to the header. Next, the multicast information is added to theheader (e.g., L1 and L2), as shown by processing block 3825, that is,the information to effect multicast label switching at intermediatenodes. The label switching information may be conveyed by either asingle sub-carrier or multiples sub-carriers, depending upon theimplementation selected. The header/payload information in the form ofan optical signal is propagated over the optical network (shown, forexample, by network 3626 of FIG. 36B); as carried out by processingblock 3830, as each optical signal arrives at an optical node withinnetwork 3636, the labels are parsed to determine multicast routing forthe optical signals. Thus, as the header/payload optical packetspropagate through the network, optical label switching is deployed tomulticast the optical packets. In turn, as evidenced by processing block3835, the packets are received via the original subset of wavelengthsand corresponding links, and the optical security information in theheader is used to convert the packets to electronic form, and thenre-assemble and re-sequence to produce the received electronic packetswhich correspond to the input source packets. Block 3840 depictsprocessing wherein one stream from the plurality of detected streams isselected for delivery to each of the destinations. Next, processing byblock 3845 is invoked to decrypt the electronic message at eachdestination. Finally, as depicted by block 3850, a reproduced version ofthe original message is received at each destination.

[0235] 1.9) Optical Header Processing for Security and Survivability andMulticasting

[0236] The foregoing description of OLSAS focused on optical headerprocessing at a level commensurate with the description of the overallNGI system configured with the overlaid security/survivability networkmulticast modules. Discussion of header processing for multicasting in asecure/survivable network at a more detailed level is alreadyencompassed by the detailed description of (a) label parsing, (b) addinga new active header to an existing header, or (c) deleting and replacingan incoming header (swapping for short) covered by the discussion ofFIGS. 24-27.

[0237] For example, as is readily apparent to one with ordinary skill inthe art, the teachings of, for example FIG. 25, are representative ofthe teachings of FIGS. 22-27. For instance, it is clear than an incomingheader utilizing a single sub-carrier centered about ƒ_(N), which headeris presumed to have the form shown in FIG. 37B, is deleted and then anew header is inserted by the processing of circuitry 2500. Thesub-carrier header signal at centered at ƒ_(N) is allocated athigh-frequency carrier so that the header signal conveyed ƒ_(N) will notaffect the data payload in the low frequency region. With reference toFIG. 25, by way of reiteration, the output of compensator 2205 feedsoptical circulator 2510, which is coupled to fiber Fabry-Perot (FFP)notch filter 2515 and attenuator 2520 in series. The combined effect ofthese components is to notch out the header signal centered at ƒ_(N);the spectrum of the input to optical circulator 2510 is shown in the topleft corner, whereas the spectrum of the output of circulator 2510 isshown in the top center. The newly inserted header signal is provided bythe series combination: write circuit 2294; modulator 2296; up-converter2281 being driven by sub-carrier ƒ_(N) Read circuit 2293 parses theheader to obtain the multicast and security features information; inturn, this information is delivered to optical switch 2207, which is amulticast switch of the type exemplified by FIGS. 7-14.

[0238] 1.10) Virtual Private Network

[0239] The teachings of the descriptions relating to: (i) multicastingas manifested by the plurality of labels (e.g., L1, L2, L3 in FIG. 37B);(ii) and security and survivability as manifested by security features(e.g., SF1, SF2, SF3 in FIG. 37B), engender yet another aspect of thepresent invention, namely, the realization of a virtual private network(VPN) with a concomitant method of carrying out communications over theVPN. It is possible to use multicasting labels and securityfeatures-like information to route optical signals through an opticalnetwork.

[0240] To illustrate an embodiment of a VPN, reference is made to FIG.39. VPN 3900 is composed of nodes 3911, 3912, . . . , 3918 (node 1, node2, . . . , node 8, respectively) interconnected by optical links 3921,3922, . . . , 3926 propagating a plurality of optical signals onnumerous wavelengths. Presume that the optical signal arriving at node3911 over one of the wavelengths comprising link 3901 is to be multicastto nodes 3912, 3917, and 3918 (nodes 2, 7, and 8), respectively.However, in order for nodes 3912, 3917, and 3918 to be able to receiveand read the data payload embedded in the optical signal, it isnecessary that these nodes have a “decoding key” to “unlock” or decodethe contents of the data payload. As shown, nodes 3912 and 3917 candecode the data payload with decoding key KEY-A; node 3918 can unlockthe data payload with decoding key KEY-B. These keys are provided to thenodes 3912, 3917, and 3918 via an off-line, typically securecommunications prior to the propagation of the data payload.

[0241] All nodes are structured with a multicast optical switch of thetype illustrated in FIGS. 7-14. Accordingly, node 3911, under control ofthe optical label, can forward the optical signals onto nodes 3912 and3913 via links 3921 and 3922, respectively (shown as a dark black lineto emphasize a link carrying a multicast optical signal). Node 3912 candecode the data payload if KEY-A matches the decoding key in the header,as explained shortly. Moreover, node 3912 multicasts the optical signalto nodes 3915 and 3918 over links 3924 and 3923, respectively. Node 3917can decode the data payload if the decoding key in the header matchesKEY-A. However, as depicted, node 3915 has no decoding key (perhapsbecause it was never received or was intentionally not provided to node3915) so node 3915 cannot decode the optical signal. Additionally, node3913 cannot decode the data payload since it does not have a decodingkey, but it does forward the optical signal onto node 3918 via opticallink 3925. Node 3918 can decode the data payload if the decoding key inthe header is KEY-B.

[0242] As can readily be deduced, if the sender of the data payloaddesires only to communicate with nodes 3912 and 3917, then the header isfilled in with decoding key KEY-A. On the other hand, if the senderdesires to communicate only with node 3918, then the decoding key isfilled in with KEY-B. In effect, underlying network 3900 has beenoverlaid with two VPNs with respect to the inconing optical signal onlink 3901, namely, a first VPN composed of only nodes 3912 and 3917, anda second VPN composed of a single node 3918. Other nodes in the path ofthe optical signal merely act as “pass-through” nodes.

[0243] The layout of the header of FIG. 40A depicts the informationconveyed by header 4005 using a single sub-carrier, whereas FIG. 40Bdepicts headers 4006 and 4007 when multiple sub-carriers are utilized.To illustrate the case above, FIG. 40A shows the decoding key KEY-Awhich will unlock the data payload for nodes 3912 and 3917, whereas FIG.40B shows the decoding keys KEY-A and KEY-B for unlocking data at nodes3912 and 3917 as well as 3918, respectively. Moreover, for exemplarypurposes, label L1 (4011) is presumed to be the label that multicaststhe optical signal from node 3911 to node 3912, whereas label L2 (4012)is the label that multicasts the optical signal from node 3911 to node3913. Similarly, label L1 multicasts from node 3912 to node 3917, and L2multicasts from node 3912 to node 3915. Label L2 multicasts (only needsto route in this example) from node 3913 to node 3918.

[0244] 1.11) Optical Technology

[0245] Optical technologies span a number of important aspects realizingthe present invention. These include optical header technology, opticalmultiplexing technology, optical switching technology, and wavelengthconversion technology.

[0246] (a) Optical Header Technology

[0247] Optical header technology includes optical header encoding andoptical header removal as discussed with respect to FIGS. 3 and 4. Ineffect, optical header 210 serves as a signaling messenger to thenetwork elements informing the network elements of the destination, thesource, and the length of the packet. Header 210 is displaced in timecompared to the actual data payload. This allows the data payload tohave any data rates/protocols or formats.

[0248] (b) Optical Multiplexing Technology

[0249] Optical multiplexing may illustratively be implemented using theknown silica arrayed waveguide grating structure. This waveguide gratingstructure has a number of unique advantages including: low cost,scalability, low loss, uniformity, and compactness.

[0250] (c) Optical Switching Technology

[0251] Fast optical switches are essential to achieving packet routingwithout requiring excessively long fiber delay as a buffer.

[0252] Micromachined Electro Mechanical Switches offer the bestcombination of the desirable characteristics: scalability, low loss,polarization insensitivity, fast switching, and robust operation.Recently reported result on the MEM based Optical Add-Drop Switchachieved 9 microsecond switching time.

[0253] (d) Wavelength Conversion Technology

[0254] Wavelength conversion is resolves packet contention withoutrequiring path deflection or packet buffering. Both path deflection andpacket buffering cast the danger of skewing the sequences of a series ofpackets. In addition, the packet buffering is limited in duration aswell as in capacity, and often requires non-transparent methods.Wavelength conversion, on the other hand, resolves the blocking bytransmitting at an alternate wavelength through the same path, resultingin the identical delay. Illustratively, a WSXC with a limited wavelengthconversion capability is deployed.

[0255] 1.12) Closing

[0256] Although the present invention have been shown and described indetail herein, those skilled in the art can readily devise many othervaried embodiments that still incorporate these teachings. Thus, theprevious description merely illustrates the principles of the invention.It will thus be appreciated that those with ordinary skill in the artwill be able to devise various arrangements which, although notexplicitly described or shown herein, embody principles of the inventionand are included within its spirit and scope. Furthermore, all examplesand conditional language recited herein are principally intendedexpressly to be only for pedagogical purposes to aid the reader inunderstanding the principles of the invention and the conceptscontributed by the inventor to furthering the art, and are to beconstrued as being without limitation to such specifically recitedexamples and conditions. Moreover, all statements herein recitingprinciples, aspects, and embodiments of the invention, as well asspecific examples thereof, are intended to encompass both structural andfunctional equivalents thereof. Additionally, it is intended that suchequivalents include both currently know equivalents as well asequivalents developed in the future, that is, any elements developedthat perform the function, regardless of structure.

[0257] In addition, it will be appreciated by those with ordinary skillin the art that the block diagrams herein represent conceptual views ofillustrative circuitry embodying the principles of the invention.Similarly, it will be appreciated that any flow charts, flow diagrams,state transition diagrams, pseudo-code, and the like represent variousprocesses which may be substantially represented in computer readablemedium and so executed by a computer or processor, whether or not suchcomputer or processor is explicitly shown.

[0258] The functions of the various elements shown in the FIGs.,including functional blocks labeled as “processors”, may be providedthrough the use of dedicated hardware as well as hardware capable ofexecuting software in association with appropriate hardware. Whenprovided by a processor, the functions may be provided by a singlededicated processor, by a single shared processor, or by a plurality ofindividual processors, some of which may be shared. Moreover, explicituse of the term “processor” or “controller” should not be construed torefer exclusively to hardware capable of executing software, and mayimplicitly include, with limitation, digital signal processor (DSP)hardware, read-only memory (ROM) for storing software, random accessmemory (RAM), and non-volatile storage. Other hardware, conventionaland/or custom, may also be included.

[0259] In the claims herein any element expressed as a means forperforming a specified function in intended to encompass any way ofperforming that function including, for example, (a) a combination ofcircuit elements which performs that function or (b) software in anyform, including, therefore, firmware, microcode, or the like, combinedwith appropriate circuitry for executing that software to perform thefunction. The invention as defined by such claims resides in the factthat the functionalities provided by the various recited means arecombined and brought together in the manner called for in the claims.Applicant thus regards and means which can provide those functionalitiesas equivalent to those shown herein.

[0260] Thus, although various embodiments which incorporate theteachings of the present invention have been shown and described indetail herein, those skilled in the art can readily devise many othervaried embodiments that still incorporate these teachings.

What is claimed is:
 1. A system for multicasting a data payload throughan optical network composed of a plurality of nodes interconnected bylinks wherein a given one of the nodes multicasts over two outgoinglinks, the data payload having a given format and protocol, the systemcomprising a route generator for generating and storing a local routinglook-up table in each of the nodes, each local look-up table listinglocal addresses for determining alternative local routes through each ofthe nodes, an adder for adding two headers to the data payload with eachof the headers being embedded in the same wavelength as the data payloadprior to inputting the data payload at an input one of the nodes toproduce an optical signal, each of the headers having a format andprotocol and conveying multicast information indicative a local routethrough the given node for the data payload and the headers, the formatand protocol of the data payload being independent of the format andprotocol of the headers, a detector for detecting the multicastinformation at the given one of the nodes to determine two switchcontrol signals with reference to the multicast information as the datapayload and the headers propagate through the optical network, anoptical splitter for splitting the optical signal into two split opticalsignals, a selector for selecting two local routes through the given oneof the nodes in correspondence to the two switch control signals, anoptical switch having input ports and output ports wherein one of thesplit optical signals couples to a first input port and the second ofthe split optical signals couples to a second input port, and whereinone of the outgoing links couples to a first output port and the secondof the outgoing links couples to a second output port, and a switchcontroller, coupled to the optical switch and responsive to the twoswitch control signals, for switching the optical switch in response tothe multicast information to optically couple the first input port withthe first output port and the second input port with the second outputport, wherein the headers are conveyed by a single sideband signaloccupying a given frequency band above the data payload, the detectorfurther comprising an opto-electrical converter for converting theoptical signal to detect the headers, and a processor, coupled toopto-electrical converter, for processing the headers to detect themulticast information, the system further comprising an optical notchfilter for filtering the optical signal with a reflective part of thenotch filter to delete the headers and recover the data payload, andmeans, coupled to the notch filter, for inserting new single-sidebandheaders at the given frequency band into the optical signal in place ofthe deleted headers.
 2. The system as recited in claim 1 wherein theadder includes a generator for generating a plurality of basebandheaders, each of the baseband headers conveying a subset of themulticast information and determining one of the switch control signals.3. The system as recited in claim 2 further including a plurality oflocal oscillators, and a mixer for mixing the baseband headers with thecorresponding plurality of local oscillators to producefrequency-shifted baseband signal.
 4. The system as recited in claim 3further including a combiner for combining the data payload at basebandwith the frequency-shifted baseband signal to produce a compositebaseband signal.
 5. The system as recited in claim 4 further including alaser source, and an optical modulator for optically modulating thecomposite baseband signal with the laser source to produce the opticalsignal.
 6. The system as recited in claim 5 wherein each of the headersis conveyed by a distinct sub-carrier frequency occupying a frequencyband above the data payload, and the detector includes means fordetecting the headers to obtain the multicast information, and aprocessor for processing the multicast information to obtain the switchcontrol signals for routing the optical signal.
 7. The system as recitedin claim 1 wherein the detector includes a header detector, coupled tothe switch controller, for detecting the multicast information in theheaders to produce the two switch control signals, in correspondence tothe two split optical signals, for the switch controller to operate theoptical switch.
 8. The system as recited in claim 1 wherein the opticalsignal arriving at the given one of the nodes is included in a compositeoptical signal, the system further comprising an optical demultiplexerfor demultiplexing the composite optical signal to recover the opticalsignal.
 9. A system for multicasting a data payload through an opticalnetwork composed of a plurality of nodes interconnected by links whereina given one of the nodes multicasts over a plurality of outgoing links,the data payload having a given format and protocol, the systemcomprising a route generator for generating and storing a local routinglook-up table in each of the nodes, each local look-up table listinglocal addresses for determining alternative local routes through each ofthe nodes, an adder for adding a plurality of headers to the datapayload with the headers being embedded in the same wavelength as thedata payload prior to inputting the data payload at an input one of thenodes to produce an optical signal, the headers having a format andprotocol and conveying multicast information indicative of local routesthrough the given node for the data payload and the headers, the formatand protocol of the data payload being independent of the format andprotocol of the headers, a detector for detecting the multicastinformation at the given one of the nodes to determine switch controlsignals with reference to the multicast information as the data payloadand the headers propagate through the optical network, an opticalsplitter for splitting the optical signal into a plurality of splitoptical signals, a selector for selecting a plurality of local routesthrough the given one of the nodes in correspondence to the switchcontrol signals, an optical switch having input ports and output portswherein each of the split optical signals couples to separate inputports, and wherein each of the outgoing links couples to correspondingoutput ports, and a switch controller, coupled to the optical switch andresponsive to the switch control signals, for switching the opticalswitch in response to the multicast information to optically couple theseparate input ports with the corresponding output ports, wherein theheaders are conveyed by a single sideband signal occupying a givenfrequency band above the data payload, the detector further comprisingan opto-electrical converter for converting the optical signal to detectthe headers, and a processor, coupled to opto-electrical converter, forprocessing the headers to detect the multicast information, the systemfurther comprising an optical notch filter for filtering the opticalsignal with a reflective part of the notch filter to delete the headersand recover the data payload, and means, coupled to the notch filter,for inserting new single-sideband headers at the given frequency bandinto the optical signal in place of the deleted headers.
 10. The systemas recited in claim 9 wherein the adder includes a generator forgenerating a plurality of baseband headers, each of the baseband headersconveying a subset of the multicast information and determining one ofthe switch control signals.
 11. The system as recited in claim 10further including a plurality of local oscillators, and a mixer formixing the baseband headers with the corresponding plurality of localoscillators to produce frequency-shifted baseband signal.
 12. The systemas recited in claim 11 further including a combiner for combining thedata payload at baseband with the frequency-shifted baseband signal toproduce a composite baseband signal.
 13. The system as recited in claim12 further including a laser source, and an optical modulator foroptically modulating the composite baseband signal with the laser sourceto produce the optical signal.
 14. The system as recited in claim 13wherein each of the headers is conveyed by a distinct sub-carrierfrequency occupying a frequency band above the data payload, and thedetector includes means for detecting the headers to obtain themulticast information, and a processor for processing the multicastinformation to obtain the switch control signals for routing the opticalsignal.
 15. The system as recited in claim 9 wherein the detectorincludes a header detector, coupled to the switch controller, fordetecting the multicast information in the headers to produce the twoswitch control signals, in correspondence to the two split opticalsignals, for the switch controller to operate the optical switch. 16.The system as recited in claim 9 wherein the optical signal arriving atthe given one of the nodes is included in a composite optical signal,the system further comprising an optical demultiplexer fordemultiplexing the composite optical signal to recover the opticalsignal.
 17. A system for multicasting a data payload through an opticalnetwork composed of a plurality of nodes interconnected by links whereina given one of the nodes multicasts over a plurality of outgoing links,the data payload having a given format and protocol, the systemcomprising a route generator for generating and storing a local routinglook-up table in each of the nodes, each local look-up table listinglocal addresses for determining alternative local routes through each ofthe nodes, an adder for adding a plurality of headers to the datapayload with the headers being embedded in the same wavelength as thedata payload prior to inputting the data payload at an input one of thenodes to produce an optical signal, the headers having a format andprotocol and conveying multicast information indicative of local routesthrough the given node for the data payload and the headers, the formatand protocol of the data payload being independent of the format andprotocol of the headers, a detector for detecting the multicastinformation at the nodes to determine switch control signals withreference to the multicast information as the data payload and theheaders propagate through the optical network, an optical splitter forsplitting the optical signal into a number of split optical signalscorresponding to number of outgoing links, an optical switch havinginput ports and output ports wherein each of the split optical signalscouples to a corresponding one of the input ports, an optical combinercoupled to predetermined ones of the output ports, a plurality ofmultiplexers for coupling the optical combiner with the outgoing links,and a switch controller, coupled to the optical switch and responsive tothe switch control signals, for switching the optical switch in responseto the multicast information to optically couple the input ports withcorresponding output ports, wherein the headers are conveyed by a singlesideband signal occupying a given frequency band above the data payload,the detector further comprising an opto-electrical converter forconverting the optical signal to detect the headers, and a processor,coupled to opto-electrical converter, for processing the headers todetect the multicast information, the system further comprising anoptical notch filter for filtering the optical signal with a reflectivepart of the notch filter to delete the headers and recover the datapayload, and means, coupled to the notch filter, for inserting newsingle-sideband headers at the given frequency band into the opticalsignal in place of the deleted headers.
 18. A system for multicasting adata payload through an optical network composed of a plurality of nodesinterconnected by links wherein a given one of the nodes multicasts overtwo outgoing links, the data payload having a given format and protocol,the system comprising a route generator for generating and storing alocal routing look-up table in each of the nodes, each local look-uptable listing local addresses for determining alternative local routesthrough each of the nodes, an adder for adding two headers to the datapayload with the headers being embedded in the same wavelength as thedata payload prior to inputting the data payload at an input one of thenodes to produce an optical signal, the headers having a format andprotocol and conveying multicast information indicative of local routesthrough the given node for the data payload and the headers, the formatand protocol of the data payload being independent of the format andprotocol of the headers, a detector for detecting the multicastinformation at the nodes to determine two switch control signals withreference to the multicast information as the data payload and theheaders propagate through the optical network, a one-by-two opticalsplitter for splitting the incoming optical signal into two splitoptical signals, a four-by-four optical switch having four input portsand four output ports wherein the two split optical signals couple tothe first and second input ports, a first two-by-one optical combinercoupled to the first and second output ports, a second two-by-oneoptical combiner coupled to the third and fourth output ports, a firstmultiplexer coupled to the first optical combiner and the second opticalcombiner wherein the output of the first multiplexer is coupled to oneof the two outgoing links, a second multiplexer coupled to the firstoptical combiner and the second optical combiner wherein the output ofthe second multiplexer is coupled to the other of the two outgoinglinks, and a switch controller, coupled to the optical switch andresponsive to the switch control signals, for switching the opticalswitch in response to the multicast information to couple the firstinput port with the first output port and the second input port with thethird output port, wherein the headers are conveyed by a single sidebandsignal occupying a given frequency band above the data payload, thedetector further comprising an opto-electrical converter for convertingthe optical signal to detect the headers, and a processor, coupled toopto-electrical converter, for processing the headers to detect themulticast information, the system further comprising an optical notchfilter for filtering the optical signal with a reflective part of thenotch filter to delete the headers and recover the data payload, andmeans, coupled to the notch filter, for inserting new single-sidebandheaders at the given frequency band into the optical signal in place ofthe deleted headers.
 19. The system as recited in claim 18 wherein thedetector includes a header detector, coupled to the switch controller,for detecting the multicast information in the headers to produce thetwo switch control signals, in correspondence to the two split opticalsignals, for the switch controller to operate the optical switch. 20.The system as recited in claim 19 wherein the optical signal to thegiven one of the nodes is included in a composite optical signal, thesystem further comprising an optical demultiplexer for demultiplexingthe composite optical signal to recover the optical signal.
 21. Theoptical system as recited in claim 18 for multicasting a second incomingoptical signal to the two outgoing links, the second incoming opticalsignal including a second set of two headers for conveying secondmulticasting information, the system further comprising a secondone-by-two optical splitter for splitting the second incoming opticalsignal into two split second optical signals, wherein the secondtwo-by-one optical combiner is coupled to the third and fourth outputports of the optical switch, and wherein said switch controller, beingresponsive to the second header, switches the optical switch in responseto the second multicast information to couple the third input port withthe second output port and the fourth input port with the fourth outputport.
 22. A system for multicasting two data payloads through an opticalnetwork composed of a plurality of nodes interconnected by links whereina given one of the nodes multicasts over two outgoing links, each datapayload having a given format and protocol, the system comprising aroute generator for generating and storing a local routing look-up tablein each of the nodes, each local look-up table listing local addressesfor determining alternative local routes through each of the nodes, anadder for adding two headers to each data payload with each set of twoheaders being embedded in the same wavelength as each corresponding datapayload prior to inputting each data payload at an input one of thenodes to produce two optical signals, the headers having a format andprotocol and conveying multicast information indicative of local routesthrough the given node for each data payload and each correspondingheader, the format and protocol of each data payload being independentof the format and protocol of each corresponding header, a firstdemultiplexer for detecting the first optical signal, a seconddemultiplexer for detecting the second optical signal, a firstone-by-two optical splitter, coupled to the first demultiplexer, forsplitting the first optical signal into two split first optical signals,a second one-by-two optical splitter, coupled to the seconddemultiplexer, for splitting the second optical signal into two splitsecond optical signals, a detector for detecting the multicastinformation at the given one of the nodes to determine four switchcontrol signals with reference to the multicast information each of thedata payloads and the corresponding headers propagate through theoptical network, a first four-by-four optical switch having four inputports and four output ports wherein the first split optical signalscouple to the first and second input ports, a second four-by-fouroptical switch having four input ports and four output ports wherein thesecond split optical signals couple to the first and second input ports,a first two-by-one optical combiner coupled to the first and secondoutput ports of the first optical switch, a second two-by-one opticalcombiner coupled to the third and fourth output ports of the firstoptical switch, a third two-by-one optical combiner coupled to the firstand second output ports of the second optical switch, a fourthtwo-by-one optical combiner coupled to the third and fourth output portsof the second optical switch, a first multiplexer coupled to the firstoptical combiner and the second optical combiner wherein the output ofthe first multiplexer is coupled to one of the two outgoing links, asecond multiplexer coupled to the first optical combiner and the secondoptical combiner wherein the output of the second multiplexer is coupledto the other of the two outgoing links, and a switch controller, coupledto the first optical switch and the second optical switch and responsiveto the switch control signals, for switching the first optical switchand second optical switch in response to the multicast information tocouple the first input port with the first output port of the firstoptical switch, the second input port with the third output port of thefirst optical switch, the first input port with the first output port ofthe second optical switch, and the second input port with the thirdoutput port of the second optical switch, wherein the headers areconveyed by a single sideband signal occupying a given frequency bandabove the data payload, the detector further comprising anopto-electrical converter for converting the optical signal to detectthe headers, and a processor, coupled to opto-electrical converter, forprocessing the headers to detect the multicast information, the systemfurther comprising an optical notch filter for filtering the opticalsignal with a reflective part of the notch filter to delete the headersand recover the data payload, and means, coupled to the notch filter,for inserting new single-sideband headers at the given frequency bandinto the optical signal in place of the deleted headers.